#!/bin/bash

cliShowSshHelp()
{
    isHeader "LibrePortal SSH Access Commands"
    echo "ssh status"
    echo "    Show the login user, password-login state, and authorized key count."
    echo ""
    echo "ssh key-add <base64-public-key>"
    echo "    Authorize a public key for SSH login (base64-encoded; the WebUI"
    echo "    encodes pasted keys for you)."
    echo ""
    echo "ssh key-remove <fingerprint>"
    echo "    Remove an authorized key by its SHA256 fingerprint."
    echo ""
    echo "ssh password-auth <on|off>"
    echo "    Enable/disable sshd password login. Disabling is refused unless at"
    echo "    least one key is authorized (lockout guard)."
    echo ""
    echo "ssh generate"
    echo "    Regenerate the WebUI SSH-access snapshot (access.json)."
    echo ""
}