mirror of
https://github.com/Moe1369/nix-fleet.git
synced 2026-04-24 23:59:07 +02:00
31 lines
848 B
Nix
31 lines
848 B
Nix
{ config, ... }: {
|
|
flake.homeModules.base-usr-ssh-all = { config, ... }: {
|
|
sops.secrets."ssh/intern/public" = {
|
|
path = "${config.home.homeDirectory}/.ssh/intern.pub";
|
|
};
|
|
sops.secrets."ssh/intern/private" = {
|
|
path = "${config.home.homeDirectory}/.ssh/intern";
|
|
mode = "0600";
|
|
};
|
|
sops.secrets."ssh/extern/public" = {
|
|
path = "${config.home.homeDirectory}/.ssh/extern.pub";
|
|
};
|
|
sops.secrets."ssh/extern/private" = {
|
|
path = "${config.home.homeDirectory}/.ssh/extern";
|
|
mode = "0600";
|
|
};
|
|
programs.ssh = {
|
|
enable = true;
|
|
enableDefaultConfig = false;
|
|
matchBlocks = {
|
|
"*" = {
|
|
identityFile = [
|
|
"${config.home.homeDirectory}/.ssh/intern"
|
|
"${config.home.homeDirectory}/.ssh/extern"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|