0 Fork 0

mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:46 +01:00

Files

T

ryan4yin | 二花 71fa928254 feat(canokey): sudo, SSH, LUKS and OpenPGP setup for daily use (#516 )

Use the CanoKey for daily authentication on idols-ai and shoukei, with
the existing passwords, passphrases and per-host SSH keys as fallback.

- sudo: pam_u2f with a shared origin (pam://ryan4yin) and a Nix-store
  authfile built from myvars.canokeyU2fKeys; the primary key is
  registered and touch-to-sudo works on idols-ai.
- SSH: one resident ed25519-sk key (application=ssh:ryan4yin) exported
  to ~/.ssh/id_ed25519_sk; GitHub tries it before the per-host key.
- shoukei LUKS: fido2-device=auto with token-timeout=10s. Update
  nixos-apple-silicon (linux-asahi 7.2.14), whose initrd adds
  thunderbolt_apple and reset_apple_cio so USB-C comes up before unlock.
- GPG: scdaemon disable-ccid so it uses pcscd.
- docs/security-keys.md: setup, PINs, enrollment, backup key and
  recovery; deduplicate the FIDO notes left by #515.

Assisted-by: Claude Code (claude-opus-5-5)

2026-11-04 01:50:21 -06:00

darwin

fix: suppress nixvim nixpkgs.source and ssh matchBlocks deprecation warnings (#262 )

2026-06-03 11:23:30 +08:00

linux

feat(canokey): sudo, SSH, LUKS and OpenPGP setup for daily use (#516 )

2026-11-04 01:50:21 -06:00

README.md

refactor: host profiles; give ruby, kana and aquamarine the TUI home (#512 )

2026-11-03 04:57:06 -06:00

README.md

Host Home Modules

This directory contains host-specific Home Manager entry modules.

Layout

home/hosts/linux/*.nix: Linux host home modules
home/hosts/darwin/*.nix: macOS host home modules

Conventions

Each host output should reference only one file under home/hosts/....
The host file imports its profile's home role, see Host Profiles.
- desktop hosts import ../../linux/gui.nix; agent hosts import ../../linux/tui.nix.
- Darwin hosts import ../../darwin.
Host-specific overrides (SSH keys, desktop toggles, host-local config links) live in the same host file.