overhauls of most service docs

active/os_debian/debian.md

@@ -14,55 +14,7 @@ and the operator will store information about each server.
 
 ## Setup SSH
 
-On the operator:
-
-```bash
-export SSH_HOST=kube
-ssh-keygen -t rsa -b 4096 -C ${USER}@${HOSTNAME} -f ~/.ssh/id_${SSH_HOST}_rsa
-
-# Note: If you get "too many authentication failures" it's likely because you have too many private
-# keys in your ~/.ssh directory. Use `-o PubkeyAuthentication` to fix it.
-ssh-copy-id -o PubkeyAuthentication=no -i ~/.ssh/id_${SSH_HOST}_rsa.pub ducoterra@${SSH_HOST}.reeselink.com
-ssh -i ~/.ssh/id_${SSH_HOST}_rsa -o 'PubkeyAuthentication=yes' ducoterra@${SSH_HOST}.reeselink.com
-```
-
-On the server:
-
-```bash
-# Copy authorized_keys to root
-sudo cp ~/.ssh/authorized_keys /root/.ssh/authorized_keys
-
-# Change your password
-passwd
-
-sudo su -
-echo "PasswordAuthentication no" > /etc/ssh/sshd_config.d/01-prohibit-password.conf
-echo '%sudo    ALL=(ALL)   NOPASSWD: ALL' > /etc/sudoers.d/01-nopasswd-sudo
-systemctl restart ssh
-```
-
-On the operator:
-
-```bash
-cat <<EOF >> ~/.ssh/config
-
-Host $SSH_HOST
-    Hostname ${SSH_HOST}.reeselink.com
-    User root
-    ProxyCommand none
-    ForwardAgent no
-    ForwardX11 no
-    Port 22
-    KeepAlive yes
-    IdentityFile ~/.ssh/id_${SSH_HOST}_rsa
-EOF
-
-# Test if you can SSH with a password
-ssh -o PubkeyAuthentication=no ducoterra@${SSH_HOST}.reeselink.com
-
-# Test that you can log into the server with ssh config
-ssh $SSH_HOST
-```
+See [README](/README.md#ssh-setup)
 
 ## Fail2Ban