Suggested markdown for creation of encryption for backup addon

ssh.md

One suggested way to install ssh encryption for this addon

Generate a key

Open a terminal in HA using one of the terminal addons, the Code Server (VSCode) addon, or from the front end of HA pi, etc. Note Home Assistant OS and Supervised mode use the folder /ssl to store the encryption files in. This replaces the ~/.ssh folder many Linux distro's use.

At the terminal prompt:

cd ~/ssl

ssh-keygen -f ~/ssl/something-unique-ed25519 -t ed25519

Change something-unique-ed25519 to something else but the letters ed25519 might help you in future troubleshooting.

Answer the questions. It is not recommended to add a passphrase for this application.

• Reference: https://www.ssh.com/academy/ssh/keygen

Copy the key

At the terminal prompt:

ssh-copy-id -i ~/ssl/something-unique-ed25519 user@host

where something-unique-ed25519 matches the filename you generated above and user@host matches the username and host where you are remote storing the data.

The name something-unique-ed25519 will also be loaded in the addon configuration in the SSH private key box. user will match the username box. host will match the remote host box.

• Reference https://www.ssh.com/academy/ssh/copy-id

Setup known_hosts

At the terminal prompt:

ssh-keyscan -H 192.168.x.x >> ~/ssl/known_hosts

where the IP address matches the IP address of the remote host you are sending the file to. host value can also be used here.

• Reference: https://www.techrepublic.com/article/how-to-easily-add-an-ssh-fingerprint-to-your-knownhosts-file-in-linux/