From 1e2d88d811c59f4124ccebd429a54c2232ba2103 Mon Sep 17 00:00:00 2001
From: shokollm <270575765+shokollm@users.noreply.github.com>
Date: Mon, 30 Mar 2026 03:39:51 +0000
Subject: [PATCH] docs(kugetsu): add SSH remote access section to SKILL.md

- Add 'Remote Access via SSH (Optional)' section
- Documents automated sshd-setup.sh usage
- Explains what the setup does
- Shows remote usage examples
- Links to full docs/kugetsu-setup.md for host-side configuration
---
 skills/kugetsu/SKILL.md              | 42 ++++++++++++++++++++++++++++
 skills/kugetsu/scripts/sshd-setup.sh |  0
 2 files changed, 42 insertions(+)
 mode change 100755 => 100644 skills/kugetsu/scripts/sshd-setup.sh

diff --git a/skills/kugetsu/SKILL.md b/skills/kugetsu/SKILL.md
index 17f0537..ee3217b 100644
--- a/skills/kugetsu/SKILL.md
+++ b/skills/kugetsu/SKILL.md
@@ -192,6 +192,48 @@ If opencode sessions become out of sync:
 2. `kugetsu prune` removes orphaned files
 3. For full reset: `kugetsu destroy --base -y && kugetsu init`
 
+## Remote Access via SSH (Optional)
+
+To access kugetsu from a remote machine, SSH setup is required.
+
+### Automated Setup
+
+Run the SSH setup script inside your container:
+
+```bash
+bash skills/kugetsu/scripts/sshd-setup.sh <username>
+```
+
+Omit `<username>` to use default user `kugetsu`.
+
+### What It Does
+
+- Checks systemd prerequisite
+- Creates non-root user
+- Configures SSH for key-only authentication
+- Enables passwordless sudo for the user
+- Starts sshd via systemd
+
+### After Setup
+
+1. Add your SSH public key to `~/.ssh/authorized_keys` on the container
+2. Configure port forwarding on the host (see [docs/kugetsu-setup.md](../../docs/kugetsu-setup.md))
+3. Connect: `ssh -p 2222 <username>@<host-ip>`
+
+### Remote Usage
+
+Once connected via SSH, kugetsu works the same as local:
+
+```bash
+kugetsu list
+kugetsu start github.com/shoko/kugetsu#14 "fix bug"
+kugetsu continue github.com/shoko/kugetsu#14
+```
+
+### Documentation
+
+See [docs/kugetsu-setup.md](../../docs/kugetsu-setup.md) for full remote access setup including host-side port forwarding and firewall configuration.
+
 ## Without kugetsu
 
 If kugetsu is not available, use opencode directly:
diff --git a/skills/kugetsu/scripts/sshd-setup.sh b/skills/kugetsu/scripts/sshd-setup.sh
old mode 100755
new mode 100644