# Git SSH Key Setup for Gitea

## Overview

Git is now configured to use SSH key authentication for all operations with `git.mymx.me`.

## SSH Key Details

- **Location**: `/opt/ansible/secrets/ssh/ansible`
- **Type**: ed25519
- **Fingerprint**: `SHA256:mkgq5V567C/CJas9nbP16kNzzVqs7z7k2X90qdP0QXE`
- **User**: `ansible@mymx.me`
- **Passphrase**: Stored in `secrets/ssh/README.md`

## Configuration

### Git Configuration

Git has been configured to use the SSH key:

```bash
git config core.sshCommand "ssh -i /opt/ansible/secrets/ssh/ansible"
```

### SSH Agent Initialization

An automatic SSH agent initialization script has been created at `/opt/ansible/.ssh-agent-init`.

To use in new shells, add to your shell profile:

```bash
source /opt/ansible/.ssh-agent-init
```

This script will:
1. Start ssh-agent if not running
2. Load the ansible SSH key with passphrase automatically
3. Persist the agent across shell sessions

## Usage

### Current Shell

In your current shell, source the initialization script:

```bash
source /opt/ansible/.ssh-agent-init
```

### Git Operations

All standard git operations now work with SSH authentication:

```bash
# Fetch updates
git fetch origin

# Pull changes
git pull origin master

# Push commits
git push origin master

# Check remote
git ls-remote origin
```

### Manual SSH Key Management

If you need to manually manage the SSH key:

```bash
# Check loaded keys
ssh-add -l

# Add key manually (will prompt for passphrase)
ssh-add /opt/ansible/secrets/ssh/ansible

# Remove key from agent
ssh-add -d /opt/ansible/secrets/ssh/ansible
```

## Troubleshooting

### "Could not open a connection to your authentication agent"

Run the initialization script:

```bash
source /opt/ansible/.ssh-agent-init
```

### "Permission denied (publickey)"

Ensure the key is loaded in ssh-agent:

```bash
ssh-add -l
```

If not listed, source the initialization script or add manually.

### Verify SSH Connection

Test SSH connection to Gitea:

```bash
ssh -T git@git.mymx.me -p 2222 -i /opt/ansible/secrets/ssh/ansible
```

## Security Notes

- Private key is stored in `secrets/` directory (should be in separate git repository)
- Passphrase is documented in `secrets/ssh/README.md`
- SSH key has read/write access to ansible repositories on git.mymx.me
- Key was uploaded to Gitea with Key ID: 5

## References

- Passphrase details: `secrets/ssh/README.md`
- SSH config: `~/.ssh/config`
- Git config: `.git/config` (core.sshCommand)