GalaxyGate Docs

Appearance

SSH keys ​

An SSH key replaces the password when you log into a server. You keep the private half on your computer and give us the public half, which is installed on your servers so your machine is trusted at boot. This is stronger than a password: there is no secret to guess or reuse, and you control exactly which keys are trusted.

Manage your keys from Security in the sidebar, then SSH Keys. The route is workspace-scoped (/workspaces/{id}/ssh), not a bare /ssh, so open it from the sidebar rather than typing a path.

How keys work in your workspace ​

  • Workspace scoped. A key you add belongs to your workspace, so every server you create in it can trust the key. You do not add a key per server.
  • They replace passwords. With your key installed, you log in without a password.
  • Each key shows a name and fingerprint. An uploaded key lists the name you gave it, who uploaded it, and its fingerprint, so you can tell keys apart.
  • You can remove a key. Take a key off the list when it should no longer be trusted, for example when someone leaves or a laptop is retired.
The SSH Keys page with the Upload SSH Key button circled
Upload a key from Security then SSH Keys (Upload SSH Key, circled); uploaded keys show a name and fingerprint.

Create a key first ​

To upload a key you need one to paste. If you do not have one, generate it on the getting-started page, which has an in-browser generator that runs on your machine and never uploads the private half. Come back here to add the public key.

Generate an SSH key

Put a key on a server you already have ​

Uploading a key trusts it on new servers. To push your keys onto a server that already exists, open that instance, use the Advanced menu, and choose Sync SSH Keys. Syncing replaces the root/admin authorized_keys on that server with your workspace keys, so any keys added manually on the box are overwritten. The panel warns: "The instance must be rebooted and be from an official template for SSH keys to sync."

Remove keys you no longer trust

If a key belongs to a device you no longer control, remove it here so it cannot reach servers that already trust it, then sync your remaining keys to those servers.