turned ssh key assignation into lambda
This commit is contained in:
25
jawz.nix
25
jawz.nix
@@ -1,18 +1,17 @@
|
||||
{ config, ... }: {
|
||||
sops.secrets = {
|
||||
sops.secrets = let
|
||||
keyConfig = file: {
|
||||
owner = config.users.users.jawz.name;
|
||||
inherit (config.users.users.jawz) group;
|
||||
path = "/home/jawz/.ssh/${file}";
|
||||
};
|
||||
in {
|
||||
jawz-password.neededForUsers = true;
|
||||
"private_keys/age".path = "/home/jawz/.ssh/ed25519_age";
|
||||
"public_keys/age".path = "/home/jawz/.ssh/ed25519_age.pub";
|
||||
"private_keys/${config.networking.hostName}" = {
|
||||
owner = config.users.users.jawz.name;
|
||||
inherit (config.users.users.jawz) group;
|
||||
path = "/home/jawz/.ssh/ed25519_${config.networking.hostName}";
|
||||
};
|
||||
"git_private_keys/${config.networking.hostName}" = {
|
||||
owner = config.users.users.jawz.name;
|
||||
inherit (config.users.users.jawz) group;
|
||||
path = "/home/jawz/.ssh/ed25519_git";
|
||||
};
|
||||
"private_keys/age" = keyConfig "ed25519_age";
|
||||
"public_keys/age" = keyConfig "ed25519_age.pub";
|
||||
"private_keys/${config.networking.hostName}" =
|
||||
keyConfig "ed25519_${config.networking.hostName}";
|
||||
"git_private_keys/${config.networking.hostName}" = keyConfig "ed25519_git";
|
||||
};
|
||||
users.users.jawz = {
|
||||
isNormalUser = true;
|
||||
|
||||
Reference in New Issue
Block a user