From 6319c6995015e55a46da07453cf039d8097f535b Mon Sep 17 00:00:00 2001 From: Kiana Sheibani Date: Sat, 3 Aug 2024 02:03:41 -0400 Subject: [PATCH] refactor: store SSH public key through agenix --- config.nix | 2 +- secrets/secrets.nix | 14 ++++++++++++++ ssh/authorized_keys | 1 - 3 files changed, 15 insertions(+), 2 deletions(-) create mode 100644 secrets/secrets.nix delete mode 100644 ssh/authorized_keys diff --git a/config.nix b/config.nix index f6d86b6..ea8c1a7 100644 --- a/config.nix +++ b/config.nix @@ -27,7 +27,7 @@ users.mutableUsers = false; users.users.root = { hashedPassword = "$y$j9T$bEfEX118OZZ58ypi4/D4F/$c1yDUO7hW7WnD5eGj..ZXieELAwUoSPHL4DIsDl6T.6"; - openssh.authorizedKeys.keyFiles = [ ./ssh/authorized_keys ]; + openssh.authorizedKeys.keys = [ (import secrets/secrets.nix).publicKey ]; }; networking.firewall.allowedTCPPorts = [ 22 80 443 ]; diff --git a/secrets/secrets.nix b/secrets/secrets.nix new file mode 100644 index 0000000..52d0045 --- /dev/null +++ b/secrets/secrets.nix @@ -0,0 +1,14 @@ +let + publicKey = + "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDemOeWGP40M495KAuylZfRHXKKr9av0QH" + + "YjQwuG5EKzoy+KH0EAtBM3MbDLX5+bCd4O4oB9H/ZWxDZFfaitTPf1nrBMA89GWAxiGwVT3" + + "U2kQL2KUIP9rXjH/KLwocqnqsljRka1McF0mijtpMhNR0jpXAOfZboHFWRE07kRacvXmhkl" + + "tcJhXiCGMYmUfFT/HroxSgV+1BM9csYItzHlHFhoB2laEQOoTE5jLxkTkqZ55W0V9QUlM1N" + + "830fvhv9z/I6PQcIPXttB4nm+339r2qA3qncRkF7j0+JIXbUkIxK7nQhv25EyFUS8WplnI7" + + "mbb2T9JWVeLsAO24WrAApbPxmu+ItKq003Qi4a/0+v6D2PCXm+YoxJlM5aHh8FZdXoIhMv7" + + "6j3lk0P0sN9Sr09gjoWkV+/rSN+3ZLCJBGS5a3LpBk3HC2ZP/mvfsd1LTDhYQBJSW0LiBZO" + + "5aRuKZrTbyY9+i75cTWjnJuvZyBDn3giSYMiVhIAcZg5dU0ySG4M28= kiana@kiana-laptop"; +in +{ + inherit publicKey; +} diff --git a/ssh/authorized_keys b/ssh/authorized_keys deleted file mode 100644 index 5c04d29..0000000 --- a/ssh/authorized_keys +++ /dev/null @@ -1 +0,0 @@ -ssh-rsa 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 kiana@kiana-laptop