add SSH instructions to workstation

infrastructure/graduated/arch/workstation.md

@@ -1,6 +1,7 @@
 # Workstation
 
 - [Workstation](#workstation)
+  - [SSH](#ssh)
   - [Toolbox](#toolbox)
   - [Podman](#podman)
   - [Docker](#docker)
@@ -37,6 +38,38 @@
   - [Glances](#glances)
   - [VirtualBox](#virtualbox)
 
+## SSH
+
+Generate a key with password protection:
+
+```bash
+# Omit "-N 'password'" to have it prompt you
+ssh-keygen -f ~/.ssh/test-key -N 'PASSWORD'
+```
+
+Change the password for an ssh key:
+
+```bash
+# Use "-N ''" to remove the password
+ssh-keygen -p -N 'PASSWORD' -f ~/.ssh/test-key
+```
+
+This is an example config entry in `~/.ssh/config`:
+
+```conf
+Host my-host
+    Hostname my-host.reeselink.com
+    User root
+    ProxyCommand none
+    ForwardAgent no
+    ForwardX11 no
+    Port 22
+    KeepAlive yes
+    IdentityFile ~/.ssh/id_my-host_rsa
+```
+
+You can ssh to that host with `ssh my-host` after adding a config entry.
+
 ## Toolbox
 
 <https://wiki.archlinux.org/title/Toolbox>