32 lines
739 B
Nix
32 lines
739 B
Nix
# /nix/store/<hash>/etc/ssh/ssh_config & /nix/store/<hash>/etc/ssh/authorized_keys
|
|
{
|
|
systemConfig,
|
|
systems,
|
|
common,
|
|
...
|
|
}:
|
|
with builtins;
|
|
let
|
|
domain = "dns.${common.domain}";
|
|
allSystems = systems ++ [
|
|
{
|
|
hostName = "homelab";
|
|
ssh.publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIARDv5nRlfPDXdV+Db4FaqeSJZ3/3MO0frYGzuVeqYAl";
|
|
}
|
|
];
|
|
in
|
|
{
|
|
programs.ssh.knownHosts = listToAttrs (
|
|
map (system: {
|
|
name = system.hostName;
|
|
value = {
|
|
extraHostNames = [ "${system.hostName}.${domain}" ];
|
|
publicKey = system.ssh.publicKey;
|
|
};
|
|
}) allSystems
|
|
);
|
|
users.users.${systemConfig.username}.openssh.authorizedKeys.keys = (
|
|
map (system: system.ssh.publicKey) allSystems
|
|
);
|
|
}
|