Commit 64cdd7a7f76d

Vincent Demeester <vincent@sbr.pm>
2026-07-28 19:19:12
feat(kyushu): route github/carthage SSH through TPM key
Extended aomi SSH overrides to kyushu so carthage and github use the TPM key instead of missing FIDO2 sk-keys.
main
1 parent 48c01cb
Changed files (1)
home
common
shell
openssh.nix
home/common/shell/openssh.nix
@@ -183,7 +183,7 @@ in
           );
         # aomi: route GitHub through the TPM key (served by ssh-tpm-agent) instead
         # of the FIDO2 sk-key, so pushes work unattended without a touch prompt.
-        aomiOverrides = lib.optionalAttrs isAomi {
+        aomiOverrides = lib.optionalAttrs (isAomi || isKyushu) {
           "github.com" = {
             identityFile = "~/.ssh/id_tpm_ecdsa.pub";
             identitiesOnly = true;