turned ssh key assignation into lambda

This commit is contained in:
2024-06-16 16:45:56 -06:00
parent 4fc2c9fdf9
commit 30b56a017b
2 changed files with 15 additions and 16 deletions

View File

@@ -1,18 +1,17 @@
{ config, ... }: {
sops.secrets = {
sops.secrets = let
keyConfig = file: {
owner = config.users.users.jawz.name;
inherit (config.users.users.jawz) group;
path = "/home/jawz/.ssh/${file}";
};
in {
jawz-password.neededForUsers = true;
"private_keys/age".path = "/home/jawz/.ssh/ed25519_age";
"public_keys/age".path = "/home/jawz/.ssh/ed25519_age.pub";
"private_keys/${config.networking.hostName}" = {
owner = config.users.users.jawz.name;
inherit (config.users.users.jawz) group;
path = "/home/jawz/.ssh/ed25519_${config.networking.hostName}";
};
"git_private_keys/${config.networking.hostName}" = {
owner = config.users.users.jawz.name;
inherit (config.users.users.jawz) group;
path = "/home/jawz/.ssh/ed25519_git";
};
"private_keys/age" = keyConfig "ed25519_age";
"public_keys/age" = keyConfig "ed25519_age.pub";
"private_keys/${config.networking.hostName}" =
keyConfig "ed25519_${config.networking.hostName}";
"git_private_keys/${config.networking.hostName}" = keyConfig "ed25519_git";
};
users.users.jawz = {
isNormalUser = true;