CI Key

A unique RSA key allows CircleCI to authenticate with the build and app servers.

On your local machine, create an private/public RSA key pair (replace "example" with your project name).

ssh-keygen -t rsa -f ci_key -C "CircleCI@example" -qN ""

Add the public key to the authorized_keys for the builder user on the build server and the web user on the app server.

Cat the public key.

cat ci_key.pub

Copy to clipboard and SSH to the build server, switch to the builder user and paste to authorized_keys.

sudo su - builder
echo "copied public key" >> .ssh/authorized_keys

Disconnect. SSH to the app server and do the same thing.

sudo su - web
echo "copied public key" >> .ssh/authorized_keys

Hold on to the private key. You'll use it in the next section.