feat: ssh key generation

justfile

@@ -1,4 +1,5 @@
 host := `hostname`
+key_services := "github gradescope"
 
 rebuild:
     sudo nixos-rebuild switch --flake .#{{host}}
@@ -10,3 +11,20 @@ gc:
     sudo nix-env --delete-generations +3
     sudo nix-store --gc
 
+# Generate high-strength, post-quantum ready SSH keys without passphrases
+gen-keys:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    mkdir -p ~/.ssh
+    
+    for service in {{key_services}}; do
+        FILE="$HOME/.ssh/id_$service"
+        
+        if [ -f "$FILE" ]; then
+            echo "skipping: $FILE already exists."
+        else
+            echo "generating: $FILE"
+            ssh-keygen -t ed25519 -a 100 -o -f "$FILE" -N ""
+        fi
+    done
+