dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

ninurta: Update path to key

Browse source
This commit is contained in:
Tim Schubert 2023-06-04 03:13:48 +02:00
parent d26c08e27f
commit f2f06c4eae
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
1 changed files with 8 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

14
nixos/ninurta/configuration.nix
View file

@ -10,7 +10,7 @@ let
wgHydraPrivKey = "pruflas-wg-hydra-key"; wgHydraPrivKey = "pruflas-wg-hydra-key";
wg0PresharedKey = "pruflas-wg0-preshared-key"; wg0PresharedKey = "pruflas-wg0-preshared-key";
hydraGitHubAuth = "hydra-github-authorization"; hydraGitHubAuth = "hydra-github-authorization";
initrdSshKey = "ninurta-initrd-ssh-key"; initrdSshKey = "/etc/ssh/ssh_initrd_ed25519_key";
in in
{ {
imports = [ imports = [
@ -44,7 +44,7 @@ in
enable = true; enable = true;
port = 2222; port = 2222;
authorizedKeys = config.dadada.admin.users.dadada.keys; authorizedKeys = config.dadada.admin.users.dadada.keys;
hostKeys = [ config.age.secrets.${initrdSshKey}.path ]; hostKeys = [ initrdSshKey ];
}; };
}; };
# Kinda does not work? # Kinda does not work?
@ -151,10 +151,12 @@ in
age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age"; age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age";
age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age"; age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age";
age.secrets.${wgHydraPrivKey}.file = "${secretsPath}/${wgHydraPrivKey}.age"; age.secrets.${wgHydraPrivKey}.file = "${secretsPath}/${wgHydraPrivKey}.age";
age.secrets.${initrdSshKey} = {
file = "${secretsPath}/${initrdSshKey}.age"; # This does not work, since the key is needed earlier than run-agenix.mount.
mode = "700"; # age.secrets.${initrdSshKey} = {
}; # file = "${secretsPath}/${initrdSshKey}.age";
# mode = "700";
# };
services.snapper = { services.snapper = {
cleanupInterval = "1d"; cleanupInterval = "1d";