fireproof/nixos
1
0
Fork 0
mirror of https://github.com/nickolaj-jepsen/nixos.git synced 2026-01-23 00:26:48 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix desktop public key

Browse source
This commit is contained in:
Nickolaj Jepsen 2025-02-19 20:32:36 +00:00
parent db3dda1f0b
commit 73d096b328
13 changed files with 24 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
parts/modules/base/secrets.nix
View file

@ -2,13 +2,13 @@
hostSecrets = ../../../secrets/hosts + ("/" + hostname);
publicKey = builtins.readFile (hostSecrets + "/id_ed25519.pub");
in {
age.identityPaths = ["/etc/ssh/ssh_host_ed25519_key"];
age.rekey = {
storageMode = "local";
hostPubkey = publicKey;
masterIdentities = [
{
identity = ../../../secrets/yubikey-identity.pub;
# pubkey = "age1yubikey1q25a8ax2t0ujv7q5wvpmlpa52h599n6682jprxuftlw4zpxy2xu9s6lhrel";
}
];
extraEncryptionPubkeys = [

4
parts/modules/base/user.nix
View file

@ -19,8 +19,8 @@ in {
users.users.${username} = {
isNormalUser = true;
extraGroups = ["wheel"];
initialPassword = "password";
#hashedPasswordFile = secrets.hashed-user-password.path;
# initialPassword = "password";
hashedPasswordFile = secrets.hashed-user-password.path;
};
home-manager = {