From 5dcab6777ba563e8fd1c773e56419a8eb5177182 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sun, 30 Jan 2022 15:04:22 +0100
Subject: ...

---
 system-profiles/openssh/default.nix               | 3 +++
 system-profiles/openssh/known-hosts/borgbase.keys | 3 +++
 2 files changed, 6 insertions(+)
 create mode 100644 system-profiles/openssh/known-hosts/borgbase.keys

diff --git a/system-profiles/openssh/default.nix b/system-profiles/openssh/default.nix
index 6370b920..d54ea6f3 100644
--- a/system-profiles/openssh/default.nix
+++ b/system-profiles/openssh/default.nix
@@ -2,6 +2,9 @@
 {
   config = {
     programs.ssh.knownHosts = lib.zipAttrsWith (_name: values: builtins.head values) (lib.mapAttrsToList (name: lib.mapAttrs' (type: value: lib.nameValuePair "${name}-${type}" value)) (customUtils.nixImport { dir = ./known-hosts; }));
+    programs.ssh.knownHostsFiles = [
+      ./known-hosts/borgbase.keys
+    ];
 
     systemd.user.services."ssh-agent".enable = lib.mkForce false; # ssh-agent should be done via home-manager
 
diff --git a/system-profiles/openssh/known-hosts/borgbase.keys b/system-profiles/openssh/known-hosts/borgbase.keys
new file mode 100644
index 00000000..f250ecc5
--- /dev/null
+++ b/system-profiles/openssh/known-hosts/borgbase.keys
@@ -0,0 +1,3 @@
+nx69hpl8.repo.borgbase.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMS3185JdDy7ffnr0nLWqVy8FaAQeVh1QYUSiNpW5ESq
+nx69hpl8.repo.borgbase.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwHsO5g7kAEpqcK4bpHCUKYV1cKCUNwVEVsDQyfj7N8L92E21n+aEhIX2Nh/kFs1W9D/pgsWQBAbco9e/ORuagHrO8hUQtbda5Z31PAo4eipwP17VQr5rF3seaJJNFV72v89PGwMOWQwvoJte+yngC6PYGKJ+w63SRtflihAmf4xa5Tci/f6jbX6t32m2F3bnephVzQO6anGXvGPR8QYQXzSu/27+LaKnLd2Kugb1Ytbo0+6kioa60HWejIZ/mCrCHXYpi0jAllaYEuAsTqFWf/OFUHrKWwRAJD0TV43O1++vLlxY85oQxIgc4oUbm93dXmDBssrTnqqq2jqonteUr
+nx69hpl8.repo.borgbase.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOstKfBbwVOYQh3J7X4nzd6/VYgLfaucP9z5n4cpSzcZAOKGh6jH8e1mhQ4YupthlsdPKyFFZ3pKo4mTaRRuiJo=
-- 
cgit v1.2.3