Commit 7d7b10487266

Vincent Demeester <vincent@sbr.pm>
2026-07-28 16:02:27
feat(globals): update kyushu host key and add TPM SSH pubkey
Updated SSH host key after Fedora CSB reinstall. Added kyushu-tpm SSH key for git access to carthage.
main
1 parent 06e442e
Changed files (1)
globals.nix
globals.nix
@@ -84,6 +84,12 @@ _: {
           gated = "aomi-git";
         };
       };
+      kyushu-tpm = {
+        key = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBc8oKSsUPsgbOB+yrqLpxdI3lt0ONhlHhTwbnrobSgDat5J/w0ZOsHJUPNU/O2Hyqd9l0UXz3d7rnwfN1sO0tQ= vdemeest@kyushu-tpm";
+        access.vincent.carthage = {
+          gated = "kyushu-git";
+        };
+      };
       # aion host key: has automation (restic backup to aix).
       # TODO: scope to aix + gate restic instead of full trust everywhere.
       aion-hostkey = {
@@ -96,7 +102,7 @@ _: {
       # kyushu host key.
       # TODO: work on removing this key entirely.
       kyushu-hostkey = {
-        key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGThdcaPfIaB7d+K5uODqEusLKGI5ZCye0aNOCaMoInO Kyushu's ssh key";
+        key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAJOJ/Kd3KGVbd2QoOC+FqKxmNHLmrAEkP6lH0yqx1nO Kyushu's ssh key";
         access = {
           vincent.default = "trusted";
           root.default = "trusted";