diff --git a/flake.lock b/flake.lock index d9a7e904..e27eb718 100644 --- a/flake.lock +++ b/flake.lock @@ -515,10 +515,10 @@ "mysecrets": { "flake": false, "locked": { - "lastModified": 1705910929, - "narHash": "sha256-Pz2cY35846PSCMHU+0ygO4qv3m54Uh8RVpq8qFP7C+E=", + "lastModified": 1706251447, + "narHash": "sha256-Re/svBgwkeTf0/ad+2jFmTc2Ult4w41AN+fj4fP9agw=", "ref": "refs/heads/main", - "rev": "91583f9f09cfdf3babcce4a2a66c633727e3b8c2", + "rev": "32e277e859828a28822a1eaedd17559a3c780eed", "shallow": true, "type": "git", "url": "ssh://git@github.com/ryan4yin/nix-secrets.git" diff --git a/modules/base.nix b/modules/base.nix index 56ed1f01..fc466149 100644 --- a/modules/base.nix +++ b/modules/base.nix @@ -25,7 +25,7 @@ # 2. Never leave the device and never sent over the network. # 2. Or just use hardware security keys like Yubikey/CanoKey. openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE400EbKY1D9zfevk17AaPTtQ8dxJvCS5Zec+8aleLY4 ryan@fern" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPoa9uEI/gR5+klqTQwvCgD6CD5vT5iD9YCNx2xNrH3B ryan@fern" ]; }; diff --git a/modules/nixos/server/security.nix b/modules/nixos/server/security.nix index 58b80522..a8e942f9 100644 --- a/modules/nixos/server/security.nix +++ b/modules/nixos/server/security.nix @@ -1,7 +1,6 @@ {username, ...}: { # Public Keys that can be used to login to all my servers. users.users.${username}.openssh.authorizedKeys.keys = [ - # TODO update keys here - "ssh-ed25519 xxx ryan@romantic" + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMzYT0Fpcp681eHY5FJV2G8Mve53iX3hMOLGbVvfL+TF ryan@romantic" ]; }