jalth ssh

Manage and use Zero Trust SSH.

jalth ssh <device>          # Connect (default)
jalth ssh enable
jalth ssh disable
jalth ssh allow <email>
jalth ssh revoke <email>
jalth ssh add-user <user>
jalth ssh remove-user <user>
jalth ssh list

`ssh <device>`

Connect to a mesh device using short-lived certificates.

jalth ssh homeserver
jalth ssh staging-vm --user deploy

`ssh enable`

Enable SSH into this device via Cloudflare Access. Configures SSH CA and tunnel route.

`ssh allow <email>`

Allow an email to SSH into this device.

Flag	Description
`--device <name>`	Target another mesh device

jalth ssh allow alice@team.com
jalth ssh allow bob@team.com --device staging-vm

`ssh revoke <email>`

Revoke an email’s SSH access.

`ssh list`

List who can SSH into this device (or another via --device).

Notes

Requires sshd on the target and ssh client locally
See Zero Trust SSH for the full guide