From 56c81782bad693fee1096c8839a7e3515b6d0d16 Mon Sep 17 00:00:00 2001 From: Toast Date: Mon, 22 Apr 2024 22:16:09 +0200 Subject: [PATCH 1/2] Machines/Everest: remove unused ssh public keys --- machines/Everest/configuration.nix | 4 ---- 1 file changed, 4 deletions(-) diff --git a/machines/Everest/configuration.nix b/machines/Everest/configuration.nix index c85e788..fdacf1b 100755 --- a/machines/Everest/configuration.nix +++ b/machines/Everest/configuration.nix @@ -38,10 +38,6 @@ # Define a user account. Don't forget to set a password with ‘passwd’. users.users.toast = { extraGroups = ["networkmanager" "transmission"]; - openssh.authorizedKeys.keys = [ - "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC2bOVmxUNvg9qFv9DlzMmTRlzcNsyNq1F1wBuAXySwsWAzHGaO+WGdSCINxW3k2ccXn7M/o1r89LeTzRzi8sWQYCpBaIqYVszM/r7SvTS4gASyKhM6lNlyUEPOnvCXH7rdtF+fjoA1TJPv7GBk78QRhGh+eVO3qhY1m++5C1CPFlyrc6sSfgIBQJ5GQZFl/7YEgsrPo+M+0Sd7LkaCOyNmJA0Wi0BA3bbf5sJhrZVMMg/p7w+eMphz2kd1VTVjW3yeMq9zLCiu4SOTBNGCMEvKIdUZbQ83lNrqO2z1/3T1bDwJgpz3xusfkNCeNJSmhfFw5ydHEUp/9jshq38WmulKAMw2Kl/Zed62AVU7Ux7YjUkZkWvo8i3eXuLUxoG891S7cWV1/ijs9QMajOLLT14FG7RbzUYYaYlx+/iNGji9d4sp9/oMYyO45TMe+vEezFSBygP7TY0QFOr4xTi49ZRQFsszbFnGRv+k3wVKoGoeNt0xWB8pBEPFtaeHJpQyJX8= id_rsa_moon" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOeu3crGqtxwaqgoQPt5mWlC8+PL/Icvcvo0MBAaK80L Key for work laptop" - ]; }; # Large builds (the linux kernel) fail to build because /tmp is too small when using tmpfs From ea9715829600fe8902b90392c7702f79136d6c0a Mon Sep 17 00:00:00 2001 From: Toast Date: Mon, 22 Apr 2024 22:16:32 +0200 Subject: [PATCH 2/2] Server/ssh: add public key for toast --- roles/server/ssh.nix | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/roles/server/ssh.nix b/roles/server/ssh.nix index 14ee0b6..1fd1288 100755 --- a/roles/server/ssh.nix +++ b/roles/server/ssh.nix @@ -18,6 +18,10 @@ in { }; }; + users.users.toast.openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEas0RvecJpUA1rG87fHunxDb4O0Q7bQG7X8h3hZnrsE Everest access key" + ]; + services.openssh = { enable = true; settings = {