## Session 2 — SSH Fleet Wiring (June 15, 2026)

### Mission: Wire every host with key-based SSH auth

### Results
🔑 Deployed `drjones@MBook-Air.local` ed25519 key to **10 hosts**
✅ **10/10 BatchMode verified** — key-based auth working fleet-wide

### Issues Fixed
| Fix | Details |
|-----|---------|
| 🐛 n8n `/root` was 777 | Blocked StrictModes → publickey auth failed. Chmod'd to 755 |
| 🔑 Key deployment | Used sshpass + ssh-copy-id across all hosts |
| 🐛 n8n sshd was socket-activated | systemd managed port 22, sshd wasn't running as daemon |

### Fleet Credentials
- **User**: `root` on everything except Router (`drjones`)
- **Password**: `czapiewski` (primary), `Czapiewski1!` (alt)
- **SSH key**: `id_ed25519` deployed everywhere

### Next Session
- Fix Proxmox API token (now have SSH, can create one)
- Docker inspect on alive hosts
- Restart Qdrant + Vikunja services
- Check n8n workflows