From e51dfb70c923b9e67466af67cae90a390e24b37c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christopher=20M=C3=BChl?= Date: Mon, 4 Aug 2025 18:12:10 +0200 Subject: [PATCH] Add SSH config --- .../christopher@cobalt/config/fixtures.nix | 8 -------- homes/x86_64-linux/christopher@cobalt/ssh.nix | 13 +++++++------ .../530af7b9efa661c3f88d1e5209b802b3-config.age | Bin 0 -> 947 bytes secrets/ssh/config.age | Bin 0 -> 1055 bytes 4 files changed, 7 insertions(+), 14 deletions(-) create mode 100644 secrets/rekeyed/christopher_cobalt/530af7b9efa661c3f88d1e5209b802b3-config.age create mode 100644 secrets/ssh/config.age diff --git a/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix b/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix index 1e6fee5..e7f143a 100644 --- a/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix +++ b/homes/x86_64-linux/christopher@cobalt/config/fixtures.nix @@ -1,12 +1,4 @@ {config, ...}: { - # SSH keys and settings - # Don't copy SSH settings as they would not be readable by Docker containers - # that require them. - # home.file.".ssh" = { - # source = ../fixtures/ssh; - # recursive = true; - # }; - home.file."${config.xdg.configHome}/eww" = { source = ../fixtures/eww; recursive = true; diff --git a/homes/x86_64-linux/christopher@cobalt/ssh.nix b/homes/x86_64-linux/christopher@cobalt/ssh.nix index a21f69c..d84ebd9 100644 --- a/homes/x86_64-linux/christopher@cobalt/ssh.nix +++ b/homes/x86_64-linux/christopher@cobalt/ssh.nix @@ -1,10 +1,10 @@ { - pkgs, config, lib, ... -}: let +}: let keys = [ + "config" "id_ethnuc" "id_europium" "id_github" @@ -12,16 +12,17 @@ "id_homeassistant" "id_rhenium" ]; -in with lib.attrsets; { +in { elements.secrets.needs = builtins.listToAttrs ( builtins.map - (key: lib.attrsets.nameValuePair key { + (key: + lib.attrsets.nameValuePair key { rekeyFile = "ssh/${key}.age"; path = "${config.home.homeDirectory}/.ssh/${key}"; symlink = false; mode = "0600"; }) - keys - ); + keys + ); } diff --git a/secrets/rekeyed/christopher_cobalt/530af7b9efa661c3f88d1e5209b802b3-config.age b/secrets/rekeyed/christopher_cobalt/530af7b9efa661c3f88d1e5209b802b3-config.age new file mode 100644 index 0000000000000000000000000000000000000000..90a4f40c99aee6047e6985dfae88a6fc79a52be9 GIT binary patch literal 947 zcmV;k15Es3XJsvAZewzJaCB*JZZ29_S2%Z3IZ{SUVR}_Bby`JKOfyC+cWZ1+RX7S*T1Y}yNI7vw zHgI=QD@{#RL^3y7dQEG1IY@9vFHciaT6r;YaWOSSc{mC!J|HttJV|gZXL4m>b7cx- zNNg}?Q&B5$V|NNIEiE8fWMVW#V`M{Ec6w5DPEj{ROE6+?Gc;yFSxi<}OjA{6S5{|G zLULDjF*FMEVSFV=Adc1$My1x$oc-m zw}s?`Yg%V&pr9m5%kbitl8>Mq36_;k==*D5hD z@PD4lJ>;@b$}RuHZa1x(u?{1I@quO1*IWBZF$1vGVYEmy4Y6xrL4_a-Q<*^^7>5U8 zsBd{sQsTpU{OVD!Cm4w7m(efdA>k6)<2om{E2#=SQDl{0`GJSzd4p4lVts%=yYwP% zCd_Xz19eZ*K4oO))c1d>Ct|zD+>kD$tRu@*0In|#x2Xp9nBp9NS)PT6crw#_;3578 zc`L@^*1ZcJO%l_U|F8=X&GuQjFRNk0lW_NYF(HOmla8YB*_EKY0mfzIbJ%yT>~06< zZvz=6m|XQN8N?&8%qZgY%8QuG=EzzqH$zV$0PRC-pQ`1h3!YpRT8;!)K|8a&4SV|R z!D7TGZ=V^WJnmIfFBN5slywIgTgUPb_%igxzXI^yCxMvSJX^yxoy3z>WA^3jRWAdz zaAUJKnIyl_$Y41#jp6$pf1XgR0cMT6vLii^6j^A+$-_+Ct$IIyCq%if) zAZmWN@pXFad2m3aCZtVEiE8wQet^?QBregdQoX;b8L5Saam+^Y*$55M>b(vZ8=M3 zLNic$adc;ONKp#LlV2y=s>WP7g|qcl?taOOElj04iU@GpGnS4^bj-|?cP=O!I>=^N zttg(K4re&Mg7aci>J2+6k%b(xi4zjyG)^<@8mfVL_k&;}^=p7D$^-ZPJ^0fvV#Eb1%PfJ*>IGRyU={O*q8rV)q`suZ%}?YF0HseqaGm{$s%lIR2>Fq#9fe}eN@%4h`CYr ziGPYogB2s?ETBT)!5JXrz3cg~U9JsqLAb%bGZ$58JaXlUu4=8)P-g2pHge4^PI}?%u{!2q>x^kb`gnhV7JuWXe%Wr_kI!H)vN08gfhQzZt1j#H$s1Y_P*B~R z%fK5VFwMK<#NkVbZtiy9iXk(yDsQvsvrcfLapI9;JKc6{o(}1dCSke7545H+|IyoZRmt2{G5= znJNLx+dtU>jK)_vl@T{< zj5pif@FaGve;>n!N0?LifW^YwV$A)Q7ACTWaH0qZI#DTd*D}vjaU? literal 0 HcmV?d00001