flotte.sh

A ssh ca (that issues short lived < 5 min certs) that is easy to setup and operate, focusing on oidc as a auth provider (entra keycloak for now), to authorize users not keys.

Using 2fa to guard servers and keys from compromises.