diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-01-30 15:04:22 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-01-30 15:04:22 +0100 |
| commit | 5dcab6777ba563e8fd1c773e56419a8eb5177182 (patch) | |
| tree | 5988a6c0198aa912fcb0998c40ad288ae84725df | |
| parent | 1066e7a197f27b674ebcb4152add91a47b43519f (diff) | |
| download | nixos-5dcab6777ba563e8fd1c773e56419a8eb5177182.tar nixos-5dcab6777ba563e8fd1c773e56419a8eb5177182.tar.gz nixos-5dcab6777ba563e8fd1c773e56419a8eb5177182.tar.bz2 nixos-5dcab6777ba563e8fd1c773e56419a8eb5177182.tar.xz nixos-5dcab6777ba563e8fd1c773e56419a8eb5177182.zip | |
...
| -rw-r--r-- | system-profiles/openssh/default.nix | 3 | ||||
| -rw-r--r-- | system-profiles/openssh/known-hosts/borgbase.keys | 3 |
2 files changed, 6 insertions, 0 deletions
diff --git a/system-profiles/openssh/default.nix b/system-profiles/openssh/default.nix index 6370b920..d54ea6f3 100644 --- a/system-profiles/openssh/default.nix +++ b/system-profiles/openssh/default.nix | |||
| @@ -2,6 +2,9 @@ | |||
| 2 | { | 2 | { |
| 3 | config = { | 3 | config = { |
| 4 | programs.ssh.knownHosts = lib.zipAttrsWith (_name: values: builtins.head values) (lib.mapAttrsToList (name: lib.mapAttrs' (type: value: lib.nameValuePair "${name}-${type}" value)) (customUtils.nixImport { dir = ./known-hosts; })); | 4 | programs.ssh.knownHosts = lib.zipAttrsWith (_name: values: builtins.head values) (lib.mapAttrsToList (name: lib.mapAttrs' (type: value: lib.nameValuePair "${name}-${type}" value)) (customUtils.nixImport { dir = ./known-hosts; })); |
| 5 | programs.ssh.knownHostsFiles = [ | ||
| 6 | ./known-hosts/borgbase.keys | ||
| 7 | ]; | ||
| 5 | 8 | ||
| 6 | systemd.user.services."ssh-agent".enable = lib.mkForce false; # ssh-agent should be done via home-manager | 9 | systemd.user.services."ssh-agent".enable = lib.mkForce false; # ssh-agent should be done via home-manager |
| 7 | 10 | ||
diff --git a/system-profiles/openssh/known-hosts/borgbase.keys b/system-profiles/openssh/known-hosts/borgbase.keys new file mode 100644 index 00000000..f250ecc5 --- /dev/null +++ b/system-profiles/openssh/known-hosts/borgbase.keys | |||
| @@ -0,0 +1,3 @@ | |||
| 1 | nx69hpl8.repo.borgbase.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMS3185JdDy7ffnr0nLWqVy8FaAQeVh1QYUSiNpW5ESq | ||
| 2 | nx69hpl8.repo.borgbase.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwHsO5g7kAEpqcK4bpHCUKYV1cKCUNwVEVsDQyfj7N8L92E21n+aEhIX2Nh/kFs1W9D/pgsWQBAbco9e/ORuagHrO8hUQtbda5Z31PAo4eipwP17VQr5rF3seaJJNFV72v89PGwMOWQwvoJte+yngC6PYGKJ+w63SRtflihAmf4xa5Tci/f6jbX6t32m2F3bnephVzQO6anGXvGPR8QYQXzSu/27+LaKnLd2Kugb1Ytbo0+6kioa60HWejIZ/mCrCHXYpi0jAllaYEuAsTqFWf/OFUHrKWwRAJD0TV43O1++vLlxY85oQxIgc4oUbm93dXmDBssrTnqqq2jqonteUr | ||
| 3 | nx69hpl8.repo.borgbase.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOstKfBbwVOYQh3J7X4nzd6/VYgLfaucP9z5n4cpSzcZAOKGh6jH8e1mhQ4YupthlsdPKyFFZ3pKo4mTaRRuiJo= | ||