b12f/os
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

ssh: separate mezza account for git.pub.solar

Browse source
This commit is contained in:
b12f 2024-11-12 22:30:16 +01:00
parent dcfc8728b3
commit 9accabdc6a
Signed by: b12f
GPG key ID: 729956E1124F8F26
2 changed files with 12 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
hosts/frikandel/unbound.nix
View file

@ -56,6 +56,7 @@
]; ];
local-zone = [ local-zone = [
"\"b12f.io\" transparent" "\"b12f.io\" transparent"
"\"pub.solar\" transparent"
]; ];
local-data = [ local-data = [
"\"stroopwafel.b12f.io. 10800 IN A 10.13.12.5\"" "\"stroopwafel.b12f.io. 10800 IN A 10.13.12.5\""
@ -106,6 +107,8 @@
"\"h${"w" + "dz" + "z.n"}et. 10800 IN AAAA fd00:b12f:acab:1312:acab:7::\"" "\"h${"w" + "dz" + "z.n"}et. 10800 IN AAAA fd00:b12f:acab:1312:acab:7::\""
"\"mail.h${"w" + "dz" + "z.n"}et. 10800 IN A 10.13.12.7\"" "\"mail.h${"w" + "dz" + "z.n"}et. 10800 IN A 10.13.12.7\""
"\"mail.h${"w" + "dz" + "z.n"}et. 10800 IN AAAA fd00:b12f:acab:1312:acab:7::\"" "\"mail.h${"w" + "dz" + "z.n"}et. 10800 IN AAAA fd00:b12f:acab:1312:acab:7::\""
"\"mezza.git.pub.solar. 10800 IN CNAME git.pub.solar\""
]; ];
tls-cert-bundle = "/etc/ssl/certs/ca-certificates.crt"; tls-cert-bundle = "/etc/ssl/certs/ca-certificates.crt";

13
users/b12f/ssh.nix
View file

@ -32,16 +32,21 @@ in {
enable = true; enable = true;
extraConfig = '' extraConfig = ''
IdentitiesOnly yes IdentitiesOnly yes
IdentityFile /home/${psCfg.user.name}/.ssh/id_yubi_gpg.pub
IdentityFile /home/${psCfg.user.name}/.ssh/id_ed25519_mezza
IdentityFile /home/${psCfg.user.name}/.ssh/id_ed25519_sk-464
IdentityFile /home/${psCfg.user.name}/.ssh/id_ed25519_sk-485
''; '';
matchBlocks = { matchBlocks = {
"* !mezza.git.pub.solar".extraOptions = {
IdentityFile = "/home/${psCfg.user.name}/.ssh/id_yubi_gpg.pub";
};
"git.pub.solar" = { "git.pub.solar" = {
user = "gitea"; user = "gitea";
}; };
"mezza.git.pub.solar" = {
user = "gitea";
identityFile = "/home/${psCfg.user.name}/.ssh/id_ed25519_mezza";
};
"aur.archlinux.org" = { "aur.archlinux.org" = {
user = "aur"; user = "aur";
}; };