xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

move ssh public keys into vars

Browse source
This commit is contained in:
xunuwu 2025-05-10 09:31:04 +02:00
parent 63fbe20d51
commit 66fc4a96b3
5 changed files with 20 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

1
sshKeys/alka_alkpc
View file

@ -1 +0,0 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDEQgWigEHjD8AGv4Omzm7q3pNk3V0ycvLnsiJkt0TB2 alka@alkpc

1
sshKeys/xun_nixdesk
View file

@ -1 +0,0 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKqW5ZkBV2XCdF/ZhwC1DOfrgiLxCC2ym6BO7miHi05M xun@nixdesk

9
sys/profiles/core/deploy.nix
View file

@ -1,6 +1,6 @@
{
lib,
self,
vars,
...
}: {
nix.settings.trusted-users = ["deploy"]; # trust closures created by our user
@ -18,9 +18,10 @@
password = lib.mkForce null;
passwordFile = lib.mkForce null;
openssh.authorizedKeys.keyFiles = [
(self + /sshKeys/xun_nixdesk)
(self + /sshKeys/alka_alkpc)
openssh.authorizedKeys.keys = with vars.sshKeys; [
xun_nixdesk
xun_redmi
alka_alkpc
];
};
}

11
sys/profiles/core/users.nix
View file

@ -1,4 +1,8 @@
{pkgs, ...}: {
{
pkgs,
vars,
...
}: {
users.users.xun = {
isNormalUser = true;
initialPassword = "nixos";
@ -12,5 +16,10 @@
"render"
"audio"
];
openssh.authorizedKeys.keys = with vars.sshKeys; [
xun_nixdesk
xun_redmi
];
};
}

5
vars/default.nix
View file

@ -1,3 +1,8 @@
{
domain = "xunuwu.xyz";
sshKeys = {
xun_nixdesk = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKqW5ZkBV2XCdF/ZhwC1DOfrgiLxCC2ym6BO7miHi05M xun@nixdesk";
xun_redmi = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK2FOrgCLSoewCnDH01SmRqsCb7cR3CA6AcULrlV+180 xun@redmi";
alka_alkpc = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDEQgWigEHjD8AGv4Omzm7q3pNk3V0ycvLnsiJkt0TB2 alka@alkpc";
};
}