====== Coolify Requires Root SSH Access to the Host ======

**Affects:** [[folkzone:services:coolify|Coolify]]

===== Fact =====

Coolify connects to the host via SSH as ''root'' to manage deployments. By default, Ubuntu disables root password login but key-based root login may also be restricted.

===== Check sshd_config =====

<code bash>
grep PermitRootLogin /etc/ssh/sshd_config
</code>

Required setting: ''PermitRootLogin prohibit-password'' (allows key auth, blocks password auth).

===== Fix =====

<code bash>
sudo sed -i 's/^PermitRootLogin no/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
sudo systemctl restart sshd
</code>

===== Add the public key to root =====

<code bash>
sudo mkdir -p /root/.ssh
sudo chmod 700 /root/.ssh
sudo sh -c 'echo "<pubkey>" >> /root/.ssh/authorized_keys'
sudo chmod 600 /root/.ssh/authorized_keys
</code>

===== See Also =====
  * [[folkzone:troubleshooting:start|Homelab Troubleshooting Index]]

  * [[folkzone:troubleshooting:coolify_ssh_setup|Coolify SSH Key Setup]]
  * [[folkzone:infrastructure:security|Security]]
  * [[start|Return to wiki home]]