# Gitea SSH rollout status

## Verified machines

### mac-5
- SSH key: `~/.ssh/work2ai_gitea_mac5_ed25519`
- Gitea key title: `work2ai-mac5-gitea`
- Verified: SSH auth + `git ls-remote`

### mac-6
- SSH key: `~/.ssh/work2ai_gitea_mac6_ed25519`
- Gitea key title: `work2ai-mac6-gitea`
- Fingerprint: `SHA256:VSBwTJ7OA7hOMGnlbqM1undwzszrCGHR45p3KT8K3CE`
- Verified:
  - `ssh -T gitea-work2ai`
  - `git ls-remote gitea-work2ai:work2ai/agent.git`
  - `tea login add --name "$GITEA_LOGIN_NAME" --url "$GITEA_URL" --token "$GITEA_TOKEN"`
  - `tea api user`

### mac-7
- SSH key: `~/.ssh/work2ai_gitea_mac7_ed25519`
- Gitea key title: `work2ai-mac7-gitea`
- Fingerprint: `SHA256:bzlSYi6JR+T5o+0ka/M4ihSPZj8pTw83Y1Z+6wYqous`
- Verified:
  - `ssh -T gitea-work2ai`
  - `git ls-remote gitea-work2ai:work2ai/agent.git`
  - `tea login add --name "$GITEA_LOGIN_NAME" --url "$GITEA_URL" --token "$GITEA_TOKEN"`
  - `tea api user`

## Convention
- Keep one dedicated Gitea SSH key per machine.
- Use `gitea-work2ai` SSH host alias on each machine.
- Prefer working repos under `~/project/workspace/gitea/...`, not in `~/openclawd/vaults`.