diff --git a/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix b/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix index 1e6fee5..e7f143a 100644 --- a/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix +++ b/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix @@ -1,12 +1,4 @@ {config, ...}: { - # SSH keys and settings - # Don't copy SSH settings as they would not be readable by Docker containers - # that require them. - # home.file.".ssh" = { - # source = ../fixtures/ssh; - # recursive = true; - # }; - home.file."${config.xdg.configHome}/eww" = { source = ../fixtures/eww; recursive = true; diff --git a/homes/x86_64-linux/christopher@cobalt/ssh.nix b/homes/x86_64-linux/christopher@cobalt/ssh.nix index a21f69c..d84ebd9 100644 --- a/homes/x86_64-linux/christopher@cobalt/ssh.nix +++ b/homes/x86_64-linux/christopher@cobalt/ssh.nix @@ -1,10 +1,10 @@ { - pkgs, config, lib, ... -}: let +}: let keys = [ + "config" "id_ethnuc" "id_europium" "id_github" @@ -12,16 +12,17 @@ "id_homeassistant" "id_rhenium" ]; -in with lib.attrsets; { +in { elements.secrets.needs = builtins.listToAttrs ( builtins.map - (key: lib.attrsets.nameValuePair key { + (key: + lib.attrsets.nameValuePair key { rekeyFile = "ssh/${key}.age"; path = "${config.home.homeDirectory}/.ssh/${key}"; symlink = false; mode = "0600"; }) - keys - ); + keys + ); } diff --git a/secrets/rekeyed/christopher_cobalt/530af7b9efa661c3f88d1e5209b802b3-config.age b/secrets/rekeyed/christopher_cobalt/530af7b9efa661c3f88d1e5209b802b3-config.age new file mode 100644 index 0000000..90a4f40 Binary files /dev/null and b/secrets/rekeyed/christopher_cobalt/530af7b9efa661c3f88d1e5209b802b3-config.age differ diff --git a/secrets/ssh/config.age b/secrets/ssh/config.age new file mode 100644 index 0000000..c3cd9fa Binary files /dev/null and b/secrets/ssh/config.age differ