Automation

SSH keys

SSH lets you push and pull without typing a password each time. You create a key pair once, give konnos the public half, and keep the private half on the machine (or agent) that runs git.

How SSH keys work

A key pair is two matching files. Think of a padlock and its key:

Public key

The padlock. Starts with ssh-ed25519 or ssh-rsa. You paste this into Settings → SSH / GPG Keys. Safe to share with konnos and with tools that only need to identify the key.

Private key

The key that opens the padlock. File name has no .pub suffix (for example ~/.ssh/id_ed25519). Never paste this into konnos, never commit it to a repo, and only share it with the process that will actually push code.

konnos never generates or displays a private key. If you only registered a public line in Settings, that is expected — the private half must already exist on the pusher.

1 · Generate a key on your Mac

Skip this if you already have a public file at ~/.ssh/id_ed25519.pub (or similar).

ssh-keygen -t ed25519 -C "you@example.com"

Press Enter to accept the default path. You get two files: ~/.ssh/id_ed25519 (private) and ~/.ssh/id_ed25519.pub (public).

Show the public line to copy:

cat ~/.ssh/id_ed25519.pub

2 · Register the public key on konnos

  1. 1

    Open SSH settings

    Go to Dashboard → Settings → SSH / GPG Keys.

  2. 2

    Add the public line

    Title: a short label (e.g. laptop or mavi-pay). Paste the entire public line into Public key, then save. The settings list shows the full public line again so you can copy it later.

3 · Push and pull over SSH

Use the SSH remote from your repository’s clone control, or:

# Hosted konnos (typical)
git remote set-url origin git@code.konnos.org:<owner>/<repo>.git
git push -u origin main

# If your host uses a non-standard SSH port (local/dev often 2222)
git remote set-url origin ssh://git@code.konnos.org:2222/<owner>/<repo>.git

Quick connection check:

ssh -T git@code.konnos.org
# or, with a custom port:
ssh -T -p 2222 git@code.konnos.org

Port and URL

Production usually uses port 22 and the short git@code.konnos.org:… form. Local or locked-down installs may use another port — always prefer the clone URL shown in the repository UI when unsure.

4 · Project agents (e.g. mavi pay)

When another project or agent must push to konnos on your behalf:

  1. 1

    Agent generates the pair

    The agent (or the machine that will push) creates the key pair and keeps the private key.

  2. 2

    You register the public key

    The agent gives you only the public line. You paste it into SSH / GPG Keys with a clear title.

  3. 3

    Agent uses the private key to push

    Configure git SSH to use that private key. konnos never holds or redisplays the private material.

Do not expect a secret download from Settings

After you add a public key, konnos can show that public line again. It will never invent a private key for you. If you need a new private key, generate a new pair and register the new public half.

5 · Related