Theo is the authorized keys manager, you can use it as replacement for all of your authorized_keys
It allows you to set fine permissions (specific user and host) or to use wildcard (ex, using host %.test.sample.com)

Summary

• System Requirements
• Prerequisites
• Documentation

System Requirements

Please check if your system meets the following minimum requirements :

Type	Value
CPU	1 GHz
RAM	512 MiB

Prerequisites

OpenSSH server must be version >= 6.2 (since it has to support AuthorizedKeysCommand option)

Documentation

Available at theoapp.readthedocs.io

Public Test Instance

A public test instance is available at theo.test.authkeys.io

Database will be reset every 6 hours (0am 6am 12pm 18pm UTC)

Configured tokens:

ADMIN_TOKEN=RMkqF4B8h6jtv3upvy3QubzNyTrMdgn8

CLIENT_TOKENS=h8LYYwGgTqKFYQ3mRN2hv8vK5CBGJvMs,gAWXaG9ZnhHAXsDbF6dv3NYEbPNuZKR7

Instance has the REQUIRE_SIGNED_KEY flag on, so you need to enable key sign/verify on your side:

• Theo CLI
• Theo agent

Be aware that the instance is public, so everyone has access to the data, please use fake email

Artwork

Theo logo created by Tomm