SSH and Security

HostnExtra Sync uses the system SSH client for remote authentication and connections.

The plugin does not implement its own SSH authentication system.

Authentication

SSH authentication is handled by the SSH configuration available to the connection.

This allows HostnExtra Sync to work with existing SSH authentication methods and configuration.

HostnExtra Sync does not store or manage SSH passwords.

SSH Configuration

When using the HostnExtra SSH Config plugin, HostnExtra Sync can use configured connection settings such as:

• SSH host
• SSH user
• SSH port
• Identity file
• ProxyJump

For example:

hostnextra sync push ./build \
    --to web-prod-01:/var/www

The SSH Config plugin is optional.

Direct SSH targets can be used without it:

hostnextra sync push ./build \
    --to [email protected]:/var/www

SSH Keys and Agents

SSH keys and SSH agent authentication remain under the control of the system SSH client.

HostnExtra Sync does not store private keys or SSH agent data.

Connection Reuse

HostnExtra Sync supports SSH connection reuse to avoid repeatedly establishing separate SSH connections during synchronization.

Temporary SSH control sockets used for connection reuse are created in the system temporary directory and cleaned up after synchronization.

Security Considerations

The --delete option can remove files from the synchronization scope.

Use a dry run before performing important delete operations:

hostnextra sync push ./build \
    --to web-prod-01:/var/www \
    --delete \
    --dry-run

Review the planned changes before executing the operation without --dry-run.