Hardware-backed SSH keys
Set up FIDO2 hardware-backed SSH keys: a YubiKey-backed key authorizes root SSH access to the home server, the public VPS, and the install ISO, and a TPM-backed key was used on a laptop.
The full write-up comes out of the interview: why, how, what broke, what it taught me, with pictures and links to the config.
