dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

ninurta: update private key location for initrd

Browse source
This commit is contained in:
Tim Schubert 2023-06-03 19:18:25 +02:00
parent 295a2e9b3b
commit 5dfb385d54
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
1 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos/ninurta/configuration.nix
View file

@ -10,7 +10,7 @@ let
wgHydraPrivKey = "${config.networking.hostName}-wg-hydra-key";
wg0PresharedKey = "${config.networking.hostName}-wg0-preshared-key";
hydraGitHubAuth = "hydra-github-authorization";
initrdPrivateKey = "${config.networking.hostName}-initrd_ssh_host_ed25519_key.age";
initrdPrivateKey = "/etc/ssh/initrd_ssh_host_ed25519_key";
in
{
imports = [
@ -33,7 +33,7 @@ in
message = "Refusing to store private keys in store";
};
boot.initrd = let initrdKeyPath = "/etc/ssh/a_initrd_ssh_host_ed25519_key"; in {
boot.initrd = {
network = {
enable = true;
flushBeforeStage2 = true;
@ -41,7 +41,7 @@ in
enable = true;
port = 2222;
authorizedKeys = config.dadada.admin.users.dadada.keys;
hostKeys = [ config.age.secrets.${initrdPrivateKey}.path ];
hostKeys = [ initrdPrivateKey ];
};
};
systemd = {
@ -141,7 +141,6 @@ in
age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age";
age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age";
age.secrets.${wgHydraPrivKey}.file = "${secretsPath}/${wgHydraPrivKey}.age";
age.secrets.${initrdPrivateKey}.file = "${secretsPath}/${initrdPrivateKey}.age";
services.snapper = {
cleanupInterval = "1d";