b12f/os
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

feat: deploy droppie root user ssh private key via nix

Browse source
This commit is contained in:
Benjamin Bädorf 2023-07-20 23:36:40 +02:00
parent c04be07044
commit 519963707a
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C
3 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/droppie/droppie.nix
View file

@ -48,5 +48,12 @@ in {
mode = "400"; mode = "400";
owner = "root"; owner = "root";
}; };
age.secrets."droppie-ssh-root.key" = {
file = "${self}/secrets/droppie-ssh-root.key";
path = "/home/${psCfg.user.name}/.ssh/id_ed25519";
mode = "400";
owner = psCfg.user.name;
};
}; };
} }

BIN
secrets/droppie-ssh-root.key Normal file
View file

Binary file not shown.

2
secrets/secrets.nix
View file

@ -49,6 +49,8 @@ in {
"dyndns-droppie.key".publicKeys = droppieKeys ++ baseKeys; "dyndns-droppie.key".publicKeys = droppieKeys ++ baseKeys;
"droppie-ssh-root.key".publicKeys = droppieKeys ++ baseKeys;
"mopidy.conf".publicKeys = chocolatebarKeys ++ biolimoKeys ++ baseKeys; "mopidy.conf".publicKeys = chocolatebarKeys ++ biolimoKeys ++ baseKeys;
"b12f-env-secrets".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys; "b12f-env-secrets".publicKeys = biolimoKeys ++ chocolatebarKeys ++ baseKeys;