From 3abc7fe9733808fdb381f657bd73c7f714a57122 Mon Sep 17 00:00:00 2001
From: Timothy DeHerrera <tim.deh@pm.me>
Date: Sun, 15 Dec 2019 02:37:45 -0700
Subject: [PATCH] users#nrd: init ssh

---
 secrets/github | Bin 0 -> 1918 bytes
 secrets/gitlab | Bin 0 -> 1788 bytes
 users/nrd.nix  |  42 ++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 42 insertions(+)
 create mode 100644 secrets/github
 create mode 100644 secrets/gitlab

diff --git a/secrets/github b/secrets/github
new file mode 100644
index 0000000000000000000000000000000000000000..6f90dc647984f3577f08963e1dd4b04a15c9cf6b
GIT binary patch
literal 1918
zcmV-^2Z8tiM@dveQdv+`0PYl*H!c;YO(DG1dU7p1f=i9P{qbEfs2iXVCiQB0OR`H<
z$dQ2W58IebG_CJ8%?E?3J2Fb|uJ>XLr>aD;kap-{0J4M@3WZxq_1OG-i15-XQWw#V
zD^<5Ko4~%biPQ@ZBeOwO>!2JSmqqr$MwH}Z`#-sKghUcCtpFt79BhwHduAv{^|$`t
z7Li2*9KKOGlBCcGO}wa9dGr1-AvdeT4#!}bY;&>3cuzqTs*zv5dPI}<RSck5HN80P
zHst7(FzwIN0h!l1xs@Ay6jPrYCvwQ_G#L^z$TyNp2sfUQddtA)iHi{1Vn=<Fq6mm@
z16r^@9;Vgk^a;B#P4Hg|QnTTLn1mVFmi4dGMYjrZe}ghDla^p>0<R4^{J>nhTn;N6
zPGBrdl>K?+qX1w#9eDrZNU$@4p`u@a%;!9K**pqO+Tq}C0M^o|n$+O_xb`lk#X|Zq
zPUI5Z%(TjYyNq!Es&U55A>M-UyD*lVfE?aAJ5U*ZsO375WMvmagO*0oQ@zPfY>ryY
z9r5wD`=*fS@>kNX{|A9a+Fega#D+<7QC~+p+%Ab*hrBxCkqG+PXkiTq&~OGHv)XVg
zNeDGXn|hHe(K`Wi(up?a;j0N6*oe%MX>O2+g%a1u2?DwqDKy}Qp5dRhcj~jzitK_M
z1dV%zC&K`l7?i?Vs|UKo=KGtf(JmttPc(zlXYI&2dGMgj5h@I8fV3k;oOnunv>BAS
zW|?+!F~7U>jDR%mE>pv>n?@GA<}+)b&4wfzhr}o2$GS95Oq0xW8fLHP)BaYBfWj_n
zR%+fr8fLu;lU9d+8;!SVurp=>IpKaQ;%WgEHp<eYP;-${KR}JWVoE&~>FjR7^@sYW
zLlW~ty|}xA&4#Lh3?#)F>HNtF(rjpC=Q^xCyI5_fDY=?jYBky=j8|;Z7nFSaRbw{3
z+EZmeM^gc9o^%#Qu(A`5GWM0vf8XrXTC8Ze0PugU6>_x`7YM8sqRB!S{ZZCxW;;{2
zs^Xpg?Cn`hD4I8~><z4f;t>+hu4D6XW_|LAScfG&%OrcB^&LC?x&{G>AYV19t<*;r
zCrPAhVMn9EYv+c^1ClUO0S2ULorOzcVN;f%B`)!&Vpc0)jzWW9Fe9KmeYj0~S2n3t
zJZ2WbSuX_Ce#<oNU2b-O0kJI`2ej@3*%gNv=blW%l4GO`Q#TEy&l%93&vlF9c(7h+
zivq6C!CTn0Gn8_HH9YiKttwizk`EqYXF17!N7GNZWsfk=--t9*jo7sb;?vN<x(`DB
zj<lBravaht4Z9yDHQUIK%^&$Bt$yR0eRJ23_Rny{gqzdbNo1{vb#s0LL_p00w|rbX
zQZ)6p#b7eWuPq7}G*rkA5`z!L&Yy4^<u9xvVDoqD7>2;p)9NAM&ibOo?@c;+fzP@>
zT~)FW<!&u3=x)TwAnW8<7QbV_&Z=2zBAKIW6X?Ok273pRF+`Yrq{f$LEEP`rxpsXT
z*$as&N7@h=IJ}%h&msvk^a-4fVvfRP50HzP1I?zFf_=m(nK2)XlktjWahzdNF-l2?
znki&H<}J5|&XX0UnO`S_(($N%l1^ONrGgGfgx9Bym#|n<#u>OmG>=)&=Z6zY{-L2o
z7ri?`!MBh2Isb{@5o|kX-<p3+5SP7fXp}(raN-mwBkn+<ooLrD)2T8oS1;HQej^#V
zY6;OdTciA*mn-pL6w?JCj)`P~UeRS^vogE!9cCst?3~R-s6Hk$rr#}@YY^{h!eXBm
z(=>Ec`EB_w=le*P`676nLWQkqV7j6ET*8@mCcY$;?P0^%-98Ir*)Tok55nWc(d&WR
zZ9z11ag8q!Wa(!DMLN66>X^j80dp|^<_t73O6O6&=NVwx-(&~t{#^%6Ebd^8=L>{Z
z>xqCtoW1i<F2gQAY@9OyB4@O8+1T@T3fnempD(zfH@4(gxfJH=jW1ILH^i~F+c56X
z5R?(`|F*_*iskI-jbQB`GY24gIIaWZ$hl>~Ll;+0*y>BtW<XR3VF7B)Luoy%sz1+7
zAH^*5>>`!ITn2^0#8QSw+DXok+(^D5r?^%2`P$<ltyQug^f5FWqS5wS7r|=|3_&tu
z<*G#yf$?%7Fns0EtrIJPn1+;LP;Z{Y=10cI`35(4nJs1Dbokojm#f*<9b1{V84afE
z$35+nxDn&5!m&>z@i!dz{Ql|3_B(>4fGL|YVYLx)uVOdaR?@tveTewL0PX=OUZUFE
z^N-IU@dDwM^bHKFq#fldWu>SV9QKzV@nH04So99Not>_6a6=4bfig@k0+nD)`0^DW
z6-p`U>Gytic?ku=sHpY4P`%u!QYe1_g*)ZfvEj6AIWvO6)VBOm6*(UFzyK;_x@9l{
za8!r(YU=`B0UQ2HDc6jO%2G)%$^GCQ8jwG9CCaY^;tWIDs$PaFKc*ywE7JS7%cuOk
z!Tgfka9)&!{ey*!$CbV;&><wX`)s1smcg<H<P~GY6}&5-%V-g6JKYd%@&jWRsP#34
EXf{H!od5s;

literal 0
HcmV?d00001

diff --git a/secrets/gitlab b/secrets/gitlab
new file mode 100644
index 0000000000000000000000000000000000000000..1d8976add1f0f145f4efbbad677f896335b473ef
GIT binary patch
literal 1788
zcmV<Y1_Sv3M@dveQdv+`02o`<=g3D{c!wk&kXIz4-uH<f1#Z77ekwleLB4Fn!d6%V
zpN4%RM?R}F)TE{~+sqO$M({Gwi@W=lBH_6WU3E%WG8qvO`wRbHxeCRWdJte<CZ$yI
zV8VNu5ncl%4H85US#CIKcC9_iqw1&Y(2r()h%NuKVMXSb#owY_J2H{dL31(TxH+8v
z5XX5+J%$z8I51h-KSUCR@`%zQJU!aFORX;+{-YQ65&Q?K%dwL2f-bac67@naDHUmt
z>bt@_6qhYU*ttk;NJfeBp~2!S_`Gog@<rnPMO1G7HW|sju_={aoBuIDL^-veya-C7
zq0biOdF~H$$4;~1fdud~qFaie!M;5<_qbN>-XI1MG;0b|PCsN5b*9^L6E7|Nl}k^C
zFu6o})=md?fMI~q+$6_aGoo3=&|}wkJki9_rH)Ts1}eu)7t*4R{H^nDgY`^6)hwe^
z*jg5g71r>lmUCSvgyA}H`XU4ZxC3a3DoYdJ|E~|mWSm*3tI{W(j5^=t_=+$R6shu;
zys-Vz@{Wk#jOMTWyVUGzgURfwHgN=fP^RvmDtY<xYHQ0ocDn{R(C%~Us5AsZqs>eT
z#xBsfZ%fM@u4q${S}kY!_256xKY)zSxm$~u^l9)iKYY@?o%Vr<PgIA~5ZulxbQ5(K
zP(ci!w^j>+Jw?k-yUeCJSieAVZ1dF+r%$^P8pkE)nMn6%6FNTfG+yD+lOm4@7fx}!
zuxzfjV3_9^$MgLyues+1A{J|6dQxXzX|1iU4@CU!2juv6G+mM!yB5k}yhhmvO{kjI
zSu|O%7R2wJ9hwk3rAj*@`ar`1wYWNlb$r#fxatH)=6h>!sc<M3RuNraiI3)IGY7%8
zrXL2_;hze=p^f-r`fAYz&7oasvkFD_{b|UH8-*1`?zg|}SSY^s+W99}s1urB9hzqa
z%*np(H6oeW<Ri}<`HxTh{$a=qh4vJ{nL!#k9aHjg0*Gc!`I^xrGsl&N6x(`Zyl>iE
zB%~bw)IQQHSQRDR+H-|4A4|AI4|5J%^z^cd4&m0KSlnlIsFR(1E=(OUqlsCRb*Wue
z>6fR;uQ{BZk82yeKEf`U6YYNQlWcXkVpb-iaQCOCH+54tG*-X5{ITTF<Kf)f<L*Cx
z#f2Kd)al|3N*w35+E7U=s|cAP7PI+aoYF8!`b=O*%PWsaXd?8&AYVNxC|u$MqCfWF
zg{pR3!pBhCFtzUjpNSb)fz@sALvzrTK$y5XOV=3@3Iq<vpI7&?<+&q>ItFcQDGW}#
zs4cTgYIGt(8AmXI;5{7qA5`r{YqCFh7tYHraJ-$UfXfid1r(S87dos&&8r0hxisV<
z>(AwhpaojSR@fOH=-%d*G6ylA5hxMlNsawinTQ4Qo-(`3jP%sW7GFvO%AI)NnHEp}
zP&3_CX(#;f*DXo5=LB-bQF}izro7W`9F!3kWi->xC~Ev4c0$#?l2~3(-N}vai@|Tn
zc2|BA_WU~l6MMTlzci8ZY)}M#PUn{sm&8Fmj3opST9GMi+a;=x@M!QHj-&kircOwQ
zAJ(<dm~B4PircRwYCSbk%!FCCcxz~!KraHmHVC|@_t4VE8@0TUL${lllQVM7hPFd+
zVX<6j|7)FnZ~Nh^n=AKsBAZ@qV6~F)!=nCmNGlM^M8yjtB}^`z^^r2m`tbgs;|upc
zMT-0y`>e|>Sgn28kP5}@ww5IeQB<V~z-6wodzZT3^hArs)O!!{?RaZUDxcU7-2@~$
z(?J3Z7n()JXqm@7Diimq){m1eMmLCf1(Iy2)g@oamXtnLv39~$7P$>(;m9mf9mj13
zNqv$-2<;jj0Twa(WzKbvJqcYw%<G7MI<__nL&hngL>3gVwSzc8YZrc&*D!6=*ADu=
zMj7i`1sXWtGW==weDtbb=8g%YkS2cDKYP@((~WQZJo(Q&5KA+0Ev-qoGok3uS=Sgl
zrhETi73FX(^yN!MV?nP{QZRxbW3$Y3?U|6iJ4Q+0TLnE9>~fr)r2=#$Q2hOh8o-DR
zrGAu<9GdCPwl@bmcHO?I@8^UNZCa?c)9SV$a;CMU4fbc%kKII;rcCpe2RGd*Sv_9b
zp<`{ZO=zfv^Q9BDNtapPKV+y&%`rHUtrrm;X47e|BY4))*VtZlE4aRXTRUZ1>fs>j
z7HkO^R9j3dbEH0AJ$0*_x8-emG0SHOGG!eLwho1kBoHDF5ApJFffPIfo~$1r@3mBt
zY}T;Sw$M2)HWztK&o&IUR3i*z!X(`6N&s0ri0KRk{1hP)`oH*txWV1B_m5NrThs{0
eZ%U6;I)6G=^Poo0Q_iTw&Sy1YjHSomQx8y>wQF4f

literal 0
HcmV?d00001

diff --git a/users/nrd.nix b/users/nrd.nix
index 3fa4d6d6..633be029 100644
--- a/users/nrd.nix
+++ b/users/nrd.nix
@@ -1,9 +1,14 @@
 { lib, ... }:
 let
+  inherit (builtins)
+    toFile
+    ;
+
   inherit (lib)
     fileContents
     ;
 
+
   name = "Timothy DeHerrera";
 in
 {
@@ -48,6 +53,43 @@ in
       };
     };
 
+    programs.ssh = {
+      enable = true;
+      hashKnownHosts = true;
+      identitiesOnly = true;
+
+      matchBlocks = let
+        githubKey = toFile "github"
+          (fileContents ../secrets/github);
+
+        gitlabKey = toFile "gitlab"
+          (fileContents ../secrets/gitlab);
+      in
+        {
+          github = {
+            host = "github.com";
+            identityFile = githubKey;
+            extraOptions = {
+              AddKeysToAgent = "yes";
+            };
+          };
+          gitlab = {
+            host = "gitlab.com";
+            identityFile = gitlabKey;
+            extraOptions = {
+              AddKeysToAgent = "yes";
+            };
+          };
+          "gitlab.company" = {
+            host = "gitlab.company.com";
+            identityFile = gitlabKey;
+            extraOptions = {
+              AddKeysToAgent = "yes";
+            };
+          };
+        };
+    };
+
     services.gng-agent = {
       enable = true;
       defaultCacheTtl = 1800;