From 82e23fd3a510f760670eea08e9de6ca6d138fb5b Mon Sep 17 00:00:00 2001
From: Mohamed Chrayed <mohamed@chrayed.de>
Date: Wed, 4 Mar 2026 15:09:26 +0100
Subject: [PATCH] key perms

---
 modules/base/usr/ssh-all.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/base/usr/ssh-all.nix b/modules/base/usr/ssh-all.nix
index 418f468..0176b88 100644
--- a/modules/base/usr/ssh-all.nix
+++ b/modules/base/usr/ssh-all.nix
@@ -5,12 +5,14 @@
     };
     sops.secrets."ssh/intern/private" = {
       path = "${config.home.homeDirectory}/.ssh/intern";
+      mode = "0600";
     };
     sops.secrets."ssh/extern/public" = {
       path = "${config.home.homeDirectory}/.ssh/extern.pub";
     };
     sops.secrets."ssh/extern/private" = {
       path = "${config.home.homeDirectory}/.ssh/extern";
+      mode = "0600";
     };
     programs.ssh.matchBlocks = {
       "intern" = {