diff --git a/ls_rclone.sh b/ls_rclone.sh
new file mode 100644
index 0000000..eb501d5
--- /dev/null
+++ b/ls_rclone.sh
@@ -0,0 +1,5 @@
+rclone ls :sftp: \
+  --sftp-host=localhost \
+  --sftp-port=11111 \
+  --sftp-user=armbian \
+  --sftp-key-file=/home/armbian/.ssh/armbian-brie-202604
diff --git a/sshtun/Dockerfile b/sshtun/Dockerfile
index 3e02ba2..da7e01b 100644
--- a/sshtun/Dockerfile
+++ b/sshtun/Dockerfile
@@ -1,16 +1,20 @@
-FROM debian:12-slim
+FROM debian:13-slim
 
-RUN apt update && apt install -y openssh-server socat
+RUN apt update
+RUN apt install -y \
+	openssh-server \
+	socat
 
-RUN adduser --disabled-password --gecos "" finn
+RUN adduser --disabled-password --gecos "" armbian
 
-RUN mkdir /home/finn/.ssh
-
-# only one pubkey -- wildcard to conceal filename
-COPY ./oilykey/*.pub /home/finn/.ssh/authorized_keys
-COPY ./oilykey/* /home/finn/.ssh/
-
-RUN mkdir /var/run/sshd
+# ssh:
+RUN mkdir /home/armbian/.ssh
+# only one pubkey -- wildcard just to conceal filename
+COPY ./oilykey/*.pub /home/armbian/.ssh/authorized_keys
+COPY ./oilykey/* /home/armbian/.ssh/
+RUN chown -R armbian:armbian /home/armbian/.ssh/
+RUN chmod 600 /home/armbian/.ssh/*
+#RUN mkdir /var/run/sshd
 RUN echo "PermitRootLogin no" >> /etc/ssh/sshd_config
 RUN echo "PasswordAuthentication no" >> /etc/ssh/sshd_config
 
diff --git a/sshtun/manual_rclone.sh b/sshtun/manual_rclone.sh
new file mode 100755
index 0000000..1bf13af
--- /dev/null
+++ b/sshtun/manual_rclone.sh
@@ -0,0 +1,8 @@
+rclone mount :sftp: /armbian/briemount \
+  --sftp-host=localhost \
+  --sftp-port=11111 \
+  --sftp-user=armbian \
+  --sftp-key-file=/home/armbian/.ssh/armbian-brie-202604 \
+  --vfs-cache-mode off \
+  --allow-other \
+  --daemon