SSH Keys

Applies to: FlexLab

Overview

SSH keys let developers open a secure shell session to FlexSite’s gateway for troubleshooting or running Drush without sharing passwords in chat. Keys are tied to your user account, not a single project.

Key concepts

  • SSH key pair — a public key (safe to upload) and private key (stays on your laptop). Generated with ssh-keygen.
  • SSH gateway — FlexSite’s controlled entry point; you never receive raw server root passwords.
  • Read-only shell — inspect files and logs without write access; higher privileges may require extra scopes.

Steps

  1. On your computer, run ssh-keygen -t ed25519 and follow prompts (passphrase recommended).
  2. Open Profile → Tokens from the account menu.
  3. In SSH Keys, click Add SSH key.
  4. Paste the public key (contents of id_ed25519.pub, not the private file).
  5. Choose capability (Read-only shell, Drush execution, etc.) and save.

Use with the CLI

  • flexsite ssh (or your team’s documented alias) connects through the gateway.
  • Requires a valid token scopes and project Team membership.

Rotation

Delete keys from Tokens when someone leaves the team or replaces a laptop — old keys should not remain trusted.