pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

feat: add declarative root ssh key on nachtigall

Browse source
This commit is contained in:
Benjamin Bädorf 2023-11-05 19:35:37 +01:00
parent a9beccc31f
commit d011cb04e1
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C
3 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
hosts/nachtigall/configuration.nix
View file

@ -58,6 +58,12 @@
users.groups.hakkonaut = {}; users.groups.hakkonaut = {};
users.users.root.initialHashedPassword = "$y$j9T$bIN6GjQkmPMllOcQsq52K0$q0Z5B5.KW/uxXK9fItB8H6HO79RYAcI/ZZdB0Djke32"; users.users.root.initialHashedPassword = "$y$j9T$bIN6GjQkmPMllOcQsq52K0$q0Z5B5.KW/uxXK9fItB8H6HO79RYAcI/ZZdB0Djke32";
age.secrets."nachtigall-root-ssh-key" = {
file = "${flake.self}/secrets/nachtigall-root-ssh-key.age";
path = "/root/.ssh/id_ed25519";
mode = "400";
owner = root;
};
# This value determines the NixOS release with which your system is to be # This value determines the NixOS release with which your system is to be
# compatible, in order to avoid breaking some software such as database # compatible, in order to avoid breaking some software such as database

BIN
secrets/nachtigall-root-ssh-key.age Normal file
View file

Binary file not shown.

3
secrets/secrets.nix
View file

@ -20,6 +20,9 @@ let
nachtigall-host nachtigall-host
]; ];
in { in {
# ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBB5XaH02a6+TchnyQED2VwaltPgeFCbildbE2h6nF5e root@nachtigall
"nachtigall-root-ssh-key.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-secret-key-base.age".publicKeys = nachtigallKeys ++ baseKeys; "mastodon-secret-key-base.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-otp-secret.age".publicKeys = nachtigallKeys ++ baseKeys; "mastodon-otp-secret.age".publicKeys = nachtigallKeys ++ baseKeys;
"mastodon-vapid-private-key.age".publicKeys = nachtigallKeys ++ baseKeys; "mastodon-vapid-private-key.age".publicKeys = nachtigallKeys ++ baseKeys;