lilith/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ssh

Browse source
This commit is contained in:
Lilith 2026-06-21 14:59:38 +02:00
parent 0057730958
commit bdcb1791ad
No known key found for this signature in database
GPG key ID: 272C807BD91F8446
7 changed files with 52 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

17
system/core/ssh.nix
View file

@ -1,5 +1,4 @@
{ ... }:
{
{ ... }: {
networking.firewall.allowedTCPPorts = [ 22 ];
sops.secrets."ssh/nixremote/private" = {
@ -22,12 +21,22 @@
Host lilith-server-builder
HostName firelilith.org
User nixremote
IdentityFile /home/lilith/.ssh/nixremote
IdentityFile /root/.ssh/nixremote
ConnectTimeout 5
Host lilith-pc-builder
HostName lilith-pc
User nixremote
IdentityFile /home/lilith/.ssh/nixremote
IdentityFile /root/.ssh/nixremote
ConnectTimeout 5
Host lilith-lab-builder
HostName lilith-lab
User nixremote
IdentityFile /root/.ssh/nixremote
ConnectTimeout 5
Host lilith-pad-builder
HostName lilith-pad
User nixremote
IdentityFile /root/.ssh/nixremote
ConnectTimeout 5
'';
};

7
system/core/users.nix
View file

@ -14,7 +14,12 @@ in
];
hashedPasswordFile = config.sops.secrets."user/password".path;
# openssh.authorizedKeys.keyFiles = [ config.sops.secrets."user/ssh/authorized" ];
# mistake in openssh module, using a keyfile here tries to read file at compile time
# openssh.authorizedKeys.keyFiles = [ config.sops.secrets."user/ssh/authorized".path ];
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJaDyGTHTfzJ+soNsOfUiboKYRJxPAK+KspcUNwWWU0q"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHlt34e/9Im6AM8qjYWM+psPQEVTQVSDHNx6wrTDLbLD"
];
};
nixremote = {