SSH Access & Keys

For maximum security, password authentication is disabled on the production servers. Access is strictly managed via cryptographic SSH keys.

Accessing the Servers

We utilize the ED25519 encryption standard for SSH keys.

• Production (Namecheap): Requires the authorized private key and the sudo user account.
• Sandbox (DigitalOcean): Matches the production key matrix.

Firewall (UFW) Configuration

• Port 22 (SSH) is strictly monitored.
• To prevent unauthorized botnet scraping, the UFW firewall rules are configured to explicitly allow traffic only from whitelisted developer IP addresses.

(If you lose access or your IP address changes, contact the Lead Architect to update the UFW whitelist).