starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-03-21 00:49:52 +01:00
Code Issues Packages Projects Releases 10 Wiki Activity

feat: update openssh keys

Browse Source
This commit is contained in:
Ryan Yin
2024-01-26 14:34:18 +08:00
parent ecc335b07e
commit 0645a593e6
3 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
flake.lock generated
View File

@@ -515,10 +515,10 @@
"mysecrets": {
"flake": false,
"locked": {
"lastModified": 1705910929,
"narHash": "sha256-Pz2cY35846PSCMHU+0ygO4qv3m54Uh8RVpq8qFP7C+E=",
"lastModified": 1706251447,
"narHash": "sha256-Re/svBgwkeTf0/ad+2jFmTc2Ult4w41AN+fj4fP9agw=",
"ref": "refs/heads/main",
"rev": "91583f9f09cfdf3babcce4a2a66c633727e3b8c2",
"rev": "32e277e859828a28822a1eaedd17559a3c780eed",
"shallow": true,
"type": "git",
"url": "ssh://git@github.com/ryan4yin/nix-secrets.git"

2
modules/base.nix
View File

@@ -25,7 +25,7 @@
# 2. Never leave the device and never sent over the network.
# 2. Or just use hardware security keys like Yubikey/CanoKey.
openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE400EbKY1D9zfevk17AaPTtQ8dxJvCS5Zec+8aleLY4 ryan@fern"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPoa9uEI/gR5+klqTQwvCgD6CD5vT5iD9YCNx2xNrH3B ryan@fern"
];
};

3
modules/nixos/server/security.nix
View File

@@ -1,7 +1,6 @@
{username, ...}: {
# Public Keys that can be used to login to all my servers.
users.users.${username}.openssh.authorizedKeys.keys = [
# TODO update keys here
"ssh-ed25519 xxx ryan@romantic"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMzYT0Fpcp681eHY5FJV2G8Mve53iX3hMOLGbVvfL+TF ryan@romantic"
];
}