reidlab/nix-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

use ssh keys instead of password

Browse source
This commit is contained in:
Reid 2023-08-24 17:47:19 -07:00
parent ed720cc9dc
commit 30cc1f42b4
4 changed files with 40 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

10
hosts/server/authorizedKeys.nix Executable file
View file

@ -0,0 +1,10 @@
[
# reidlab
{ hostname = "reidlab@rei-pc";
ssh = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICmwWuwS+a1GzYFSNOkgk/zF5bolXqat1RP5FXJv+vto reidlab@rei-pc";
}
{
hostname = "reidlab@rei-phone";
ssh = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKC12NkyZAFNDHfq1ECh4uAgM4mpKfsQnL3XF/ZzSyCJ reidlab@rei-phone";
}
]

12
hosts/server/default.nix
View file

@ -1,6 +1,10 @@
{ config, lib, pkgs, ... }:
{
let
keys = import ./authorizedKeys.nix;
fetchSSH = (host: lib._.getSSH host keys);
fetchSSHKeys = map fetchSSH;
in {
imports = [
./hardware-configuration.nix
./webapps/default.nix
@ -20,6 +24,10 @@
conf = {
packages = with pkgs; [ bat tree micro duf ];
extraGroups = [ "wheel" "dotfiles" ];
openssh.authorizedKeys.keys = fetchSSHKeys [
"reidlab@rei-pc"
"reidlab@rei-phone"
];
};
homeConf.home = {
@ -39,7 +47,7 @@
services = {
ssh = {
enable = true;
requirePassword = true;
requirePassword = false;
};
postgres.enable = true;