diff --git a/RESUME.md b/RESUME.md
index 634b88a..34076e3 100644
--- a/RESUME.md
+++ b/RESUME.md
@@ -25,7 +25,7 @@ Last updated: 2026-05-26.
 - [ ] **Infisical OIDC config** — manual step in Infisical admin at `http://secrets.nuclide.lan:8200/admin` → Settings → OIDC. Client `b2069075-…`, secret `qsANw95zsza0_…`.
 - [ ] **Infisical secrets migration Phase 2** — import CT104 `.env` keys via `infisical import`.
 - [ ] **Grafana HAOS dashboard** — HA recorder reconfiguration (exclude Prometheus-covered metrics).
-- [ ] **HAOS SSH key** — paste nuc public key in HA terminal. Key: `ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuVqBW3VXgPji62zAtlpAigRhPZ18ObCc/QoRSUjAdycsfRR46B5cW3IR1PVP9q4jliVPjnORh/... root@nuc` (run `cat /root/.ssh/id_rsa.pub` on nuc for full key).
+- [x] ~~**HAOS SSH key**~~ — done 2026-05-27.
 - [x] ~~**Obsidian config drift**~~ — removed `obsidian42-brat`, `obsidian-tasks-plugin`, `tasks-caldav-sync` from `community-plugins.json` 2026-05-27.
 - [ ] **Memos Sync plugin install** — config pushed to `obsidian-config`, plugin binary needs Community-Plugins install + paste of pre-baked `data.json`.
 - [ ] **Immich HTTP/2 Keep-Alive** — root-caused 2026-05-24. Workaround live (per-SSID LAN URL). Permanent fix: strip header at Zoraxy. **Needs Zoraxy confirmation.**