From 6d24f72114c71ec4c305552db26194ea76ee413d Mon Sep 17 00:00:00 2001
From: Mohamed Chrayed <mo@chrayed.de>
Date: Tue, 3 Mar 2026 16:55:15 +0100
Subject: [PATCH] add secrets

---
 modules/base/sshd/sshd.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/modules/base/sshd/sshd.nix b/modules/base/sshd/sshd.nix
index de8a583..849da56 100644
--- a/modules/base/sshd/sshd.nix
+++ b/modules/base/sshd/sshd.nix
@@ -1,5 +1,11 @@
 { ... }: {
-  flake.nixosModules.sshd = {
+  flake.nixosModules.sshd = { config, user, ... }: {
     services.openssh.enable = true;
+
+    sops.secrets."users/${user}/intern/public" = {};
+
+    users.users.${user}.openssh.authorizedKeys.keyFiles = [
+      config.sops.secrets."users/${user}/intern/public".path
+    ];
   };
 }