Commit 23601446aea0

Vincent Demeester <vincent@sbr.pm>
2025-05-21 12:27:28
systems: add some ssh keys for user vincent…
I should also add more things, to have the same behavior as before, but this is a start. Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent a7136c0
Changed files (2)
systems
common
users
vincent.nix
globals.nix
systems/common/users/vincent.nix
@@ -54,8 +54,8 @@ in
     ];
     initialPassword = "changeMe";
 
-    # FIXME set this up
-    # openssh.authoizeKeys.keys = [ ];
+    # FIXME set this up better
+    openssh.authorizedKeys.keys = globals.ssh.vincent;
 
     # 🤔
     packages = [ pkgs.home-manager ];
globals.nix
@@ -1,5 +1,13 @@
 { lib, ... }:
 {
+  ssh = {
+    vincent = [
+      # Yubikeys
+      "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFT5Rx+4Wuvd8lMBkcHxb4oHdRhm/OTg+p5tvPzoIN9enSmgRw5Inm/SlS8ZzV87G1NESTgzDRi6hREvqDlKvxs="
+      "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBGHMa4rHuBbQQYv+8jvlkFCD2VYRGA4+5fnZAhLx8iDirzfEPqHB60UJWcDeixnJCUlpJjzFbS4crNOXhfCTCTE="
+      "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBFzxC16VqwTgWDQfw2YCiOw2JzpH3z9XgHtKoHhBdHi2i9m9XUc7fIUeEIIf7P8ARRNd8q5bjvl8JY7LtPkNCU="
+    ];
+  };
   net = {
     dns = {
       cacheNetworks = [
@@ -58,6 +66,10 @@
           ips = [ "10.100.0.83" ];
         };
       };
+      ssh = {
+        root = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFQVlSrUKU0xlM9E+sJ8qgdgqCW6ePctEBD2Yf+OnyME root@aomi";
+        vincent = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILJmTdMKYdgqpbQWBif58VBuwX+GqMGsMfB1ey1TKrM3 vincent@aomi";
+      };
     };
     demeter = {
       net = {
@@ -108,6 +120,12 @@
     */
     wg-ips = ips: builtins.map (x: "${x}/24") ips;
 
+    # # keysFor = user: ;
+    # hasSSHAttr = _name: value: builtins.hasAttr "ssh" value;
+    # keysFor =
+    #   machines: user:
+    #   lib.attrsets.mapAttrsToList (_name: value: value) (lib.attrsets.filterAttrs hasSSHAttr machines);
+
     /**
         Return true if the given host has a list of Syncthing folder configured.
       *