Default: we generate a fresh per-VPS key and show you a one-liner to install on the target. Pick ephemeral cert if you'd rather we never hold a long-lived key at all.
We’ll generate a dedicated ed25519 keypair for this VPS. After you save, the detail page will show a one-liner to paste on the target — that installs the public half. We keep the private half encrypted at rest and never expose it.