Toast/nix-stuff
1
0
Fork 0
Code Issues Pull requests Projects 1 Wiki Activity

Compare commits

base: Toast:befadf8ed215431ad7529a08e77eabf293328ab9
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05
..
compare: Toast:228cbf373480b5c2d90823d43699952727a8fa3c
Branches Tags
Toast:main
Toast:plasma-refactor
Toast:headscale
Toast:plasma6
Toast:catppuccin
Toast:kde-stuff
Toast:firefox
Toast:upgrade-to-23.05

No commits in common. "befadf8ed215431ad7529a08e77eabf293328ab9" and "228cbf373480b5c2d90823d43699952727a8fa3c" have entirely different histories.
befadf8ed2 ... 228cbf3734

2 changed files with 5 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

8
flake.lock generated
View file

@ -377,11 +377,11 @@
"secrets": {
"flake": false,
"locked": {
"lastModified": 1713776544,
"narHash": "sha256-EQW8P1TfkYQV0EEK1n3Gh9wRp9KlC0EbidH2j+niCaE=",
"lastModified": 1713107869,
"narHash": "sha256-TniJoCQfJ3OXrcqhH/8xcV6o4Sa5C/4KSRtk0c0/RK4=",
"ref": "refs/heads/main",
"rev": "61410d68f15b3b970067a3fdd39667fdd9a89edd",
"revCount": 12,
"rev": "a00a07cd931b6eab722727a0606837cb895997f0",
"revCount": 11,
"type": "git",
"url": "ssh://forgejo@git.everest.sable-pancake.ts.net:4222/Toast/nix-secrets"
},

29
roles/server/ssh.nix
View file

@ -1,37 +1,10 @@
{
flakeSelf,
config,
...
}: let
hostSecrets = "${flakeSelf.inputs.secrets}/" + config.networking.hostName + "/";
hostKeyPath = "/etc/ssh/everest_host_key";
in {
age.secrets = {
everest-host-key = {
file = hostSecrets + "host-private-key.age";
path = hostKeyPath;
mode = "0400";
};
"everest-host-key.pub" = {
file = hostSecrets + "host-public-key.age";
path = hostKeyPath + ".pub";
};
};
{...}: {
services.openssh = {
enable = true;
settings = {
UseDns = true;
PermitRootLogin = "no";
PasswordAuthentication = false;
};
hostKeys = [
{
path = hostKeyPath;
type = "ed25519";
comment = "Everest host key";
}
];
startWhenNeeded = true;
};
}