overhauls of most service docs

README.md

@@ -14,6 +14,8 @@ Status](https://gitea.reeseapps.com/services/homelab/actions/workflows/distoolbo
 - [Homelab](#homelab)
   - [Table of Contents](#table-of-contents)
   - [Fun Facts](#fun-facts)
+    - [Keyboard Shortcuts](#keyboard-shortcuts)
+  - [SSH Setup](#ssh-setup)
   - [Important Dates and Times](#important-dates-and-times)
   - [Project Lifecycle](#project-lifecycle)
   - [Project Types](#project-types)
@@ -25,33 +27,77 @@ Status](https://gitea.reeseapps.com/services/homelab/actions/workflows/distoolbo
 
 ## Fun Facts
 
+### Keyboard Shortcuts
+
 On linux, <kbd>ctrl</kbd>+<kbd>shift</kbd>+<kbd>u</kbd>, then, while holding
 <kbd>ctrl</kbd>+<kbd>shift</kbd>, typing <kbd>b</kbd>+<kbd>0</kbd> will type a
 ° (degree) symbol. Also you can enter any unicode symbol this way.
 
-To generate an SSH key with the correct comment and type run:
+In vim: `esc + o` will take you to the end of a file and insert a new line.
+
+## SSH Setup
 
 ```bash
-export KEYGEN_USER=myuser
-export KEYGEN_HOST=something.com
-ssh-keygen -C ${KEYGEN_USER}@${KEYGEN_HOST} -f ~/.ssh/id_${KEYGEN_HOST} -t ed25519
+export REMOTE_USER=${USER}
+export REMOTE_HOST=something.com
+export REMOTE_PORT=22
+
+# The following is generated by the above variables. No tweaks necessary.
+export KEY_NAME=~/.ssh/id_${REMOTE_USER}_${REMOTE_HOST}
+export KEY_COMMENT="${USER}@${HOSTNAME}:${REMOTE_USER}@${REMOTE_HOST}"
+
+# Pick one of the below key types
+# ed25519
+ssh-keygen -C ${KEY_COMMENT} -f ${KEY_NAME} -t ed25519
+# rsa 4096
+ssh-keygen -C ${KEY_COMMENT} -f ${KEY_NAME} -t rsa -b 4096
 
 cat <<EOF >> ~/.ssh/config
-Host ${KEYGEN_HOST}
-    Hostname ${KEYGEN_HOST}
-    IdentityFile ~/.ssh/id_${KEYGEN_HOST}
-    User ${KEYGEN_USER}
-    Port 22
-EOF
-```
 
-In vim: `esc + o` will take you to the end of a file and insert a new line.
+Host ${REMOTE_HOST}
+    Hostname ${REMOTE_HOST}
+    IdentityFile ${KEY_NAME}
+    User ${REMOTE_USER}
+    Port ${REMOTE_PORT}
+EOF
+
+# Copy the generated key to the server using password auth. Assumes password auth enabled.
+ssh-copy-id -o PubkeyAuthentication=no -i ${KEY_NAME} ${REMOTE_USER}@${REMOTE_HOST}
+
+# Log into the server with your key
+ssh -i ${KEY_NAME} ${KEY_COMMENT}
+# Copy authorized_keys to root
+sudo cp ~/.ssh/authorized_keys /root/.ssh/authorized_keys
+exit
+
+# login and disable password auth
+ssh ${REMOTE_HOST}
+echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/01-prohibit-password.conf
+systemctl restart sshd
+
+# OPTIONAL: Disable sudo password
+echo '%wheel    ALL=(ALL)   NOPASSWD: ALL' > /etc/sudoers.d/01-nopasswd-wheel
+
+exit
+
+# Test if you can SSH with a password
+ssh -o PubkeyAuthentication=no ducoterra@${SSH_HOST}.reeselink.com
+
+# Test that you can log into the server with ssh config
+ssh $SSH_HOST
+```
 
 ## Important Dates and Times
 
-- Machine updates happen at 4am on on Saturday
-- VM updates happen at 5am on Saturday
-- Backups happen at 6am every day
+| Time  | Day      | Description                    |
+| ----- | -------- | ------------------------------ |
+| 00:00 | All      | Automated builds               |
+| 00:00 | All      | NAS Snapshots                  |
+| 02:00 | All      | Backups                        |
+| 04:00 | Saturday | Server Hardware Updates        |
+| 05:00 | Saturday | Server VM Updates              |
+| 05:00 | All      | Unifi Protect Firmware Updates |
+| 06:00 | All      | Unifi Network Firmware Updates |
 
 ## Project Lifecycle