How do I setup SSH authentication for deployments?

If you are setting up an SFTP server or SHELL server for deployments we offer the option to add extra security by using SSH key authentication.

In order to use key authentication, you’ll need to add a key to your server that we will check against every time a deployment is triggered. Each server will have it's own unique key.

When in the server settings screen you’ll have the option to download a public key. You’ll need to add this to the authorized_keys file (usually located under your user directory at ~/.ssh/authorized_keys) on your server. Each server will get a unique public key for increased security, which you can generate right on that screen.

Important Information on RSA Algorithm

At some point in the past Beanstalk used RSA algorithm for its deployment keys, which is considered obsolete and may not be supported by newer Linux distributions. All new accounts and repositories use ed25519 algorithm instead but if you have an older account or repository, it's possible it still has an old RSA key attached to it. If you want this key to be replaced with an ed25519 key, just drop us an email in support and we'll get it resolved for you. Let us know in the email which particular repository, deployment environment, or deployment server you want keys to be replaced for.