From 02a0b57551a6a5f9ebccff226c12b8f671a7c149 Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Tue, 3 Aug 2021 17:12:41 +0200 Subject: vidhar: initrd ssh --- hosts/vidhar/default.nix | 21 +-------------------- 1 file changed, 1 insertion(+), 20 deletions(-) (limited to 'hosts/vidhar/default.nix') diff --git a/hosts/vidhar/default.nix b/hosts/vidhar/default.nix index 4d7830e8..25f37133 100644 --- a/hosts/vidhar/default.nix +++ b/hosts/vidhar/default.nix @@ -3,6 +3,7 @@ imports = with flake.nixosModules.systemProfiles; [ ./zfs.nix initrd-all-crypto-modules default-locale openssh rebuild-machines + initrd-ssh ]; config = { @@ -41,15 +42,6 @@ hdd4.device = "/dev/disk/by-label/${hostName}-hdd4"; hdd5.device = "/dev/disk/by-label/${hostName}-hdd5"; }; - - network = { - enable = true; - ssh = { - enable = true; - hostKeys = with config.sops.secrets; [ initrd_ssh_host_rsa_key.path initrd_ssh_host_ed25519_key.path ]; - authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys ++ map (kF: builtins.readFile kF) config.users.users.root.openssh.authorizedKeys.keyFiles; - }; - }; }; supportedFilesystems = [ "zfs" ]; @@ -58,17 +50,6 @@ }; }; - sops.secrets = { - initrd_ssh_host_rsa_key = { - key = "rsa"; - sopsFile = ./initrd-host-keys/private.yaml; - }; - initrd_ssh_host_ed25519_key = { - key = "ed25519"; - sopsFile = ./initrd-host-keys/private.yaml; - }; - }; - fileSystems = { "/" = { fsType = "tmpfs"; -- cgit v1.2.3