From ee25a44a2fbd59e83c0198b31b5b69a104d50136 Mon Sep 17 00:00:00 2001
From: XTRM-Unraid <admin@xtrm-lab.org>
Date: Thu, 22 Jan 2026 18:27:03 +0200
Subject: [PATCH] Add agent service account credentials for Slurp'it

---
 docs/AGENT-CREDENTIALS.md | 99 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 docs/AGENT-CREDENTIALS.md

diff --git a/docs/AGENT-CREDENTIALS.md b/docs/AGENT-CREDENTIALS.md
new file mode 100644
index 0000000..5a061a7
--- /dev/null
+++ b/docs/AGENT-CREDENTIALS.md
@@ -0,0 +1,99 @@
+# Agent Service Account Credentials
+
+**Created:** 2026-01-22
+**Purpose:** Read-only service account for Slurp'it network discovery and monitoring
+
+> ⚠️ **SECURITY NOTE:** This file contains sensitive credentials. Ensure the repository has appropriate access controls.
+
+---
+
+## Account Details
+
+| Property | Value |
+|----------|-------|
+| Username | `agent` |
+| Password | `LOQWhsIzeGmWcsbO7dMI` |
+| SSH Key | Ed25519 (see below) |
+
+---
+
+## Configured Devices
+
+| Device | IP | SSH Port | Status |
+|--------|-----|----------|--------|
+| Unraid Server | 192.168.31.2 | 422 | ✅ Configured |
+| MikroTik Router (hAP ax³) | 192.168.31.1 | 2222 | ✅ Configured |
+| MikroTik Switch (CSS326) | 192.168.31.9 | - | ❌ SwOS - No SSH |
+| MikroTik AP (cAP ac) | 192.168.31.6 | - | ❌ SSH Disabled |
+
+---
+
+## SSH Keys
+
+### Private Key (`/root/.ssh/agent_key`)
+
+```
+-----BEGIN OPENSSH PRIVATE KEY-----
+b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
+QyNTUxOQAAACCoNicuNDnSBn5pcK+uFL2x6/TsIQ5NE0qr7JW3HRM3lAAAAJCM4urpjOLq
+6QAAAAtzc2gtZWQyNTUxOQAAACCoNicuNDnSBn5pcK+uFL2x6/TsIQ5NE0qr7JW3HRM3lA
+AAAECfei47vy1Gcg+zpr+8QGN/27rV2MMAPCL+MlKtt2G0sqg2Jy40OdIGfmlwr64UvbHr
+9OwhDk0TSqvslbcdEzeUAAAADWFnZW50QHNsdXJwaXQ=
+-----END OPENSSH PRIVATE KEY-----
+```
+
+### Public Key (`/root/.ssh/agent_key.pub`)
+
+```
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKg2Jy40OdIGfmlwr64UvbHr9OwhDk0TSqvslbcdEzeU agent@slurpit
+```
+
+---
+
+## Permissions
+
+### Unraid
+- Shell: `/bin/bash`
+- Home: `/home/agent`
+- Groups: `agent`
+
+### MikroTik Router
+- Group: `read` (read-only access)
+- SSH Key Auth: Enabled
+
+---
+
+## Slurp'it Vault Configuration
+
+Add these credentials in **Slurp'it Portal** → **Vault** → **Credentials**:
+
+### For Unraid (Linux):
+| Field | Value |
+|-------|-------|
+| Group | default |
+| Username | agent |
+| Password | LOQWhsIzeGmWcsbO7dMI |
+| Device OS | linux |
+| SSH Port | 422 |
+| Comment | Unraid agent |
+
+### For MikroTik Router:
+| Field | Value |
+|-------|-------|
+| Group | default |
+| Username | agent |
+| SSH Key | (paste private key above) |
+| Device OS | mikrotik_routeros |
+| Comment | MikroTik router agent |
+
+---
+
+## Testing Access
+
+```bash
+# Test Unraid SSH
+ssh -i /root/.ssh/agent_key -p 422 agent@192.168.31.2 'hostname'
+
+# Test MikroTik SSH
+ssh -i /root/.ssh/agent_key -p 2222 agent@192.168.31.1 '/system identity print'
+```