chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2026-01-12 04:19:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

modules.user.chn.ssh: set key for root

Browse Source
This commit is contained in:
陈浩南
2025-05-15 21:23:12 +08:00
parent 2db2e83d7c
commit cc28a59bb7
2 changed files with 23 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
modules/user/chn/ssh.nix
View File

@@ -51,13 +51,19 @@ inputs:
);
};
};
sops.secrets = inputs.lib.mkIf inputs.config.nixos.model.private (builtins.listToAttrs (builtins.map
(name:
sops.secrets = inputs.lib.mkIf inputs.config.nixos.model.private (inputs.lib.mkMerge
[
(builtins.listToAttrs (builtins.map
(name:
{
name = "chn/${name}";
value = { owner = "chn"; sopsFile = "${inputs.config.nixos.system.sops.crossSopsDir}/chn.yaml"; };
})
[ "rsa" "rsa.ppk" "ed25519" "ed25519_sk" "xmuhk" ]))
{
name = "chn/${name}";
value = { owner = "chn"; sopsFile = "${inputs.config.nixos.system.sops.crossSopsDir}/chn.yaml"; };
})
[ "rsa" "rsa.ppk" "ed25519" "ed25519_sk" "xmuhk" ]
));
"root/ed25519_sk" =
{ key = "chn/ed25519_sk"; sopsFile = "${inputs.config.nixos.system.sops.crossSopsDir}/chn.yaml"; };
}
]);
};
}

12
modules/user/default.nix
View File

@@ -120,10 +120,18 @@ inputs:
openssh.authorizedKeys.keys = [(builtins.readFile ./chn/id_ed25519_sk.pub)];
hashedPassword = "$y$j9T$.UyKKvDnmlJaYZAh6./rf/$65dRqishAiqxCE6LEMjqruwJPZte7uiyYLVKpzdZNH5";
};
home-manager.users.root =
home-manager.users.root = homeInputs:
{
imports = user.sharedModules;
config.programs.git = { userName = "chn"; userEmail = "chn@chn.moe"; };
config =
{
programs.git = { userName = "chn"; userEmail = "chn@chn.moe"; };
home.file = inputs.lib.mkIf inputs.config.nixos.model.private
{
".ssh/id_ed25519_sk".source = homeInputs.config.lib.file.mkOutOfStoreSymlink
inputs.config.sops.secrets."root/ed25519_sk".path;
};
};
};
}
# setup test