infrastructure:hermes-shell-access
# Hermes Shell Access
## SSH Key Reference
| Target | Key Location | User | Notes |
| ——– | ————- | —— | ——- |
| kaburusvr | `/opt/hermes/config/hetzner_id_ed25519` | root | Hetzner server |
| TrueNAS | `/home/kaburu/.ssh/id_ed256` | truenas_admin | LAN + Tailscale |
| ubuntu-svr | `~/.ssh/id_ed256` | `kaburu` | ⚠️ DIFFERENT KEY — NOT hermes_shell_id_ed25519 |
| OPNsense | API only | — | SSH does not work |
## ⚠️ CRITICAL: ubuntu-svr Key Mismatch
ubuntu-svr does NOT accept `/opt/hermes/config/hermes_shell_id_ed25519`. It only accepts `/home/kaburu/.ssh/id_ed256`.
This key is NOT in /opt/hermes/config/ — it is in the user's SSH directory.
### Wrong (will fail): ``` ssh -i /opt/hermes/config/hermes_shell_id_ed25519 [email protected] ```
### Correct: ``` ssh -i ~/.ssh/id_ed256 [email protected] # or via SSH alias: ssh ubuntu-svr ```
## SSH Config on kaburuaibox
`~/.ssh/config`: ``` Host ubuntu-svr
HostName 192.168.0.252 User kaburu Port 22 IdentityFile ~/.ssh/id_ed256 StrictHostKeyChecking no ConnectTimeout 10
```
## MCP Tools
| Target | MCP Tool |
| ——– | ———- |
| kaburusvr | `hetzner_shell` |
| TrueNAS | `truenas_shell` |
| OPNsense | `opnsense_shell` |
| ubuntu-svr | No MCP tool — use SSH directly |
| kaburuaibox | Direct shell (no SSH needed) |
infrastructure/hermes-shell-access.txt · Last modified: (external edit)
