dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

ninurta: Update path to key

Browse source
This commit is contained in:
Tim Schubert 2023-06-04 03:13:48 +02:00
parent d26c08e27f
commit f2f06c4eae
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nixos/ninurta/configuration.nix
View file

@ -10,7 +10,7 @@ let
wgHydraPrivKey = "pruflas-wg-hydra-key";
wg0PresharedKey = "pruflas-wg0-preshared-key";
hydraGitHubAuth = "hydra-github-authorization";
initrdSshKey = "ninurta-initrd-ssh-key";
initrdSshKey = "/etc/ssh/ssh_initrd_ed25519_key";
in
{
imports = [
@ -44,7 +44,7 @@ in
enable = true;
port = 2222;
authorizedKeys = config.dadada.admin.users.dadada.keys;
hostKeys = [ config.age.secrets.${initrdSshKey}.path ];
hostKeys = [ initrdSshKey ];
};
};
# Kinda does not work?
@ -151,10 +151,12 @@ in
age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age";
age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age";
age.secrets.${wgHydraPrivKey}.file = "${secretsPath}/${wgHydraPrivKey}.age";
age.secrets.${initrdSshKey} = {
file = "${secretsPath}/${initrdSshKey}.age";
mode = "700";
};
# This does not work, since the key is needed earlier than run-agenix.mount.
# age.secrets.${initrdSshKey} = {
# file = "${secretsPath}/${initrdSshKey}.age";
# mode = "700";
# };
services.snapper = {
cleanupInterval = "1d";