diff --git a/modules/apps/ssh/authorized_keys b/modules/apps/ssh/authorized_keys new file mode 100644 index 0000000..2a9e773 --- /dev/null +++ b/modules/apps/ssh/authorized_keys @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ/1g4Y40TgInxULMSYBFhCqiETxCHUXhFZbXyxb/t+n ryan@thalia \ No newline at end of file diff --git a/modules/apps/ssh/default.nix b/modules/apps/ssh/default.nix index 0f4fab0..3350939 100644 --- a/modules/apps/ssh/default.nix +++ b/modules/apps/ssh/default.nix @@ -61,7 +61,7 @@ in }; }; home.packages = with pkgs; [ sshs ]; - programs.ssh = { + programs.ssh = { enable = true; extraConfig = '' Host thalia @@ -87,5 +87,11 @@ in ''; }; }; + + users.users.${username}.openssh.authorizedKeys.keyFiles = [ + ./authorized_keys + ]; + + }; } diff --git a/secrets/default.nix b/secrets/default.nix index 994ce9a..70b075f 100644 --- a/secrets/default.nix +++ b/secrets/default.nix @@ -19,7 +19,7 @@ in defaultSopsFile = ./secrets.yaml; defaultSopsFormat = "yaml"; secrets = { - password_secure = { }; + password_secure = { }; password_insecure = { }; "syncthing/cert" = { }; "syncthing/key" = { }; @@ -42,7 +42,6 @@ in defaultSymlinkPath = "/run/user/1000/secrets"; defaultSecretsMountPoint = "/run/user/1000/secrets.d"; secrets = { - "test" = { }; "github_token" = { }; }; }; diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml index 1a44f26..f44ffcd 100644 --- a/secrets/secrets.yaml +++ b/secrets/secrets.yaml @@ -5,8 +5,9 @@ password_insecure: ENC[AES256_GCM,data:q6g19uQcIqjmsg==,iv:Wy2FDNtFU1pl+23jqu8K9 syncthing: cert: ENC[AES256_GCM,data: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,iv:xThuPyFq3lPtnYXyCx9WtYWzPK3A6HH2K7ulnNbo+kU=,tag:PaU6Fa4jXgRnwCg9lRTBvg==,type:str] key: ENC[AES256_GCM,data:PJVykKJq86KSXi3Oo3NukZwew6pxVrR2i7qofbxmHSvsVCGHdaYJSzCz1dvLCU0XFH2soLfQfY/fQXf0gTaUFmPyf/NZwinWIbDOaYXIFYDdCT1JmxENeRgASrCFAZ2pN3CtQpzpPYoG0c6j6LwwLFeuMecGcm9oCzXgIzV+FZzyRu4juFwWtdvllYpl0yfi6EUwcxYIYof574XY7KhNxvx1bshTZkS0WDePwBliS8PxswN66xzpP969cmoGA5gQ5Otohia3f+K8ehoy8wr+rAMorxAsElYtRmOOJ1rG6UySr6+j+xo722J+cNk4n+vFWlmoAQajX5JgK0H6R3s8ciUVvs81TZYPJU8rGZD1nxrrkqkJwEjRE4jxXhtpNW+f,iv:1vfQ65juysJbKprZjtI+7WBmm+UaxTA60LOHA05SRx4=,tag:D6JGMJKzSUKVKmG7fEvR/w==,type:str] -ssh_keys: - ryan@orion: ENC[AES256_GCM,data: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,iv:3CCnHH5nen/QS8Js5HdbvTKUm0fH3Zg+g9A6GM6Qr+o=,tag:v+TrXdTwo2qRPZGbVHBqGQ==,type:str] +ssh: + private_keys: + ryan@orion: ENC[AES256_GCM,data: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,iv:XHSTbv5aTYtya0BNbS1uNWTXbOcP+mBCk9Gkx7cn1zE=,tag:2IwYw7mSChgHJceHeSSC3Q==,type:str] sops: kms: [] gcp_kms: [] @@ -22,8 +23,8 @@ sops: UUhHcUFFVVdkVG91NTdDZXRGZzZ4aGcKZvHvEIQBEenoOlh+jPrWF5Tdd8faSK3u 9uEOgg203CYgiZ+jUPFPpqR8vHKOmIFDq2vkKV8UdobrLuXG5fApsw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-01-26T00:27:06Z" - mac: ENC[AES256_GCM,data:ABa9DjxvHkZxDKywzWZfo6yrf0ESp+UiwM45sm9OxzCa9tLkaJzzKBoW7ChG+HEaUNrZ1mvsiRTPDgcazKasGLjEe3lVQUZVTvNglFYLp/RarqRkT21CvtELSPAKKvmlTNyDOnN5vubuLeaAQcJJW2tiLRj3Mg7/dNqAhasnr+w=,iv:bTfesyV/k5Y37yei6cU9ZHW3WD6ZnlHS1akgX6w3R4c=,tag:zcwWiuhsR+MbJN+xGKRg+g==,type:str] + lastmodified: "2025-01-26T03:04:30Z" + mac: ENC[AES256_GCM,data:yzzw17P0DrA/kv9qzw2UNwrEwyH+8r1vGsLAN4IIUsAVEROSWSqS+emt5zLgzaPhGGcgRbYuczosuXRb2w2uu644u1nkeJqrYgXuPksqBgwljewGxjLmMJYy9iY5HkYbhy59M3hjf7tihWCJXdDKWGd4N/aKJxsbpj+EsQtJxHM=,iv:7NXDLC0VUTmgorfRlEV2haiUumcFDjkb1LC0++saHDY=,tag:BDtwatWx1lpvhdzv2RmxaQ==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.3