Session 2: SSH fleet wiring — 10/10 BatchMode

README.md

@@ -1,25 +1,25 @@
-# Homelab Gym 🏋️
+## Session 2 — SSH Fleet Wiring (June 15, 2026)
 
-Daily workouts exercising every skill and service in the fleet.
+### Mission: Wire every host with key-based SSH auth
 
----
+### Results
+🔑 Deployed `drjones@MBook-Air.local` ed25519 key to **10 hosts**
+✅ **10/10 BatchMode verified** — key-based auth working fleet-wide
 
-## Session 1 — June 15, 2026
+### Issues Fixed
+| Fix | Details |
+|-----|---------|
+| 🐛 n8n `/root` was 777 | Blocked StrictModes → publickey auth failed. Chmod'd to 755 |
+| 🔑 Key deployment | Used sshpass + ssh-copy-id across all hosts |
+| 🐛 n8n sshd was socket-activated | systemd managed port 22, sshd wasn't running as daemon |
 
-### Warm-up: Network Pulse (22 hosts)
-🟢 9 alive serving | 🟡 2 alive blocked | 🔴 11 dead
-
-### Exercises
-1. 🏋️ **Gitea** — Listed 50 repos, created tracker repo
-2. 🏋️ **The Hex** — Health OK (835 indexed, 1119 qBittorrent torrents)
-3. 🏋️ **ASUS Router** — Up 1:43, 26 DHCP clients, 234G USB
-4. 🏋️ **WikiJS** — 7 pages (OpenClaw, LifeOS, Charly dashboard)
-5. 🏋️ **Docker Recon** — Fleet SSH broken (key auth dead)
-
-### Issues Found 🐛
-🔴 Proxmox tokens stale | 🔴 Fleet SSH key-auth broken
-🟡 Qdrant (68) down | 🟡 Vikunja (222) down
-🟡 11/22 hosts unreachable
+### Fleet Credentials
+- **User**: `root` on everything except Router (`drjones`)
+- **Password**: `czapiewski` (primary), `Czapiewski1!` (alt)
+- **SSH key**: `id_ed25519` deployed everywhere
 
 ### Next Session
-Fix SSH keys → Docker inspect → Proxmox tokens → Qdrant/Vikunja recovery
+- Fix Proxmox API token (now have SSH, can create one)
+- Docker inspect on alive hosts
+- Restart Qdrant + Vikunja services
+- Check n8n workflows