Skip to content

Commit

Permalink
Fix docs
Browse files Browse the repository at this point in the history
  • Loading branch information
cmd-ntrf committed Oct 27, 2023
1 parent 6848774 commit eb26994
Showing 1 changed file with 7 additions and 3 deletions.
10 changes: 7 additions & 3 deletions docs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -1192,17 +1192,21 @@ Refer to the [reverse proxy configuration](https://github.com/ComputeCanada/pupp
### 6.5 SSHFP records and DNSSEC
Magic Castle creates SSHFP records for all instances with a public ip address.
Magic Castle DNS module creates SSHFP records for all instances with a public ip address.
These records can be used by SSH clients to verify the SSH host keys of the server.
If [DNSSEC](https://www.cloudflare.com/dns/dnssec/how-dnssec-works/)
is enabled for the domain of these records and the SSH client is correctly configured,
is enabled for the domain and the SSH client is correctly configured,
no host key confirmation will be prompted when connecting to the server.
For more information on how to activate DNSSEC, refer to your DNS provider documentation:
- [CloudFlare - Enable DNSSEC](https://developers.cloudflare.com/dns/dnssec/#enable-dnssec)
- [Google Cloud - Manage DNSSEC configuration](https://cloud.google.com/dns/docs/dnssec-config#enabling)
To setup an SSH client to use SSHFP record, add `VerifyHostKeyDNS yes` to its configuration.
To setup an SSH client to use SSHFP records, add
```
VerifyHostKeyDNS yes
```
to its configuration file (i.e.: `~/.ssh/config`).
## 7. Planning
Expand Down

0 comments on commit eb26994

Please sign in to comment.