dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

ninurta: update private key location for initrd

Browse source
This commit is contained in:
Tim Schubert 2023-06-03 19:18:25 +02:00
parent 295a2e9b3b
commit 5dfb385d54
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
1 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos/ninurta/configuration.nix
View file

@ -10,7 +10,7 @@ let
wgHydraPrivKey = "${config.networking.hostName}-wg-hydra-key"; wgHydraPrivKey = "${config.networking.hostName}-wg-hydra-key";
wg0PresharedKey = "${config.networking.hostName}-wg0-preshared-key"; wg0PresharedKey = "${config.networking.hostName}-wg0-preshared-key";
hydraGitHubAuth = "hydra-github-authorization"; hydraGitHubAuth = "hydra-github-authorization";
initrdPrivateKey = "${config.networking.hostName}-initrd_ssh_host_ed25519_key.age"; initrdPrivateKey = "/etc/ssh/initrd_ssh_host_ed25519_key";
in in
{ {
imports = [ imports = [
@ -33,7 +33,7 @@ in
message = "Refusing to store private keys in store"; message = "Refusing to store private keys in store";
}; };
boot.initrd = let initrdKeyPath = "/etc/ssh/a_initrd_ssh_host_ed25519_key"; in { boot.initrd = {
network = { network = {
enable = true; enable = true;
flushBeforeStage2 = true; flushBeforeStage2 = true;
@ -41,7 +41,7 @@ in
enable = true; enable = true;
port = 2222; port = 2222;
authorizedKeys = config.dadada.admin.users.dadada.keys; authorizedKeys = config.dadada.admin.users.dadada.keys;
hostKeys = [ config.age.secrets.${initrdPrivateKey}.path ]; hostKeys = [ initrdPrivateKey ];
}; };
}; };
systemd = { systemd = {
@ -141,7 +141,6 @@ in
age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age"; age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age";
age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age"; age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age";
age.secrets.${wgHydraPrivKey}.file = "${secretsPath}/${wgHydraPrivKey}.age"; age.secrets.${wgHydraPrivKey}.file = "${secretsPath}/${wgHydraPrivKey}.age";
age.secrets.${initrdPrivateKey}.file = "${secretsPath}/${initrdPrivateKey}.age";
services.snapper = { services.snapper = {
cleanupInterval = "1d"; cleanupInterval = "1d";