# Hermes Shell Access

## SSH Key Reference

| Target | Key Location | User | Notes |
|--------|-------------|------|-------|
| kaburusvr | `/opt/hermes/config/hetzner_id_ed25519` | root | Hetzner server |
| TrueNAS | `/home/kaburu/.ssh/id_ed256` | truenas_admin | LAN + Tailscale |
| **ubuntu-svr** | **`~/.ssh/id_ed256`** | **`kaburu`** | **⚠️ DIFFERENT KEY — NOT hermes_shell_id_ed25519** |
| OPNsense | API only | — | SSH does not work |

## ⚠️ CRITICAL: ubuntu-svr Key Mismatch

ubuntu-svr does NOT accept `/opt/hermes/config/hermes_shell_id_ed25519`. It only accepts `/home/kaburu/.ssh/id_ed256`.

**This key is NOT in /opt/hermes/config/ — it is in the user's SSH directory.**

### Wrong (will fail):
```
ssh -i /opt/hermes/config/hermes_shell_id_ed25519 kaburu@192.168.0.252
```

### Correct:
```
ssh -i ~/.ssh/id_ed256 kaburu@192.168.0.252
# or via SSH alias:
ssh ubuntu-svr
```

## SSH Config on kaburuaibox

`~/.ssh/config`:
```
Host ubuntu-svr
    HostName 192.168.0.252
    User kaburu
    Port 22
    IdentityFile ~/.ssh/id_ed256
    StrictHostKeyChecking no
    ConnectTimeout 10
```

## MCP Tools

| Target | MCP Tool |
|--------|----------|
| kaburusvr | `hetzner_shell` |
| TrueNAS | `truenas_shell` |
| OPNsense | `opnsense_shell` |
| ubuntu-svr | No MCP tool — use SSH directly |
| kaburuaibox | Direct shell (no SSH needed) |