Sops based on ssh keys

This commit is contained in:
Aleksandr Lebedev 2025-07-30 18:51:51 +02:00
parent ec740591b3
commit 1b6310a742
16 changed files with 115 additions and 78 deletions

View file

@ -241,6 +241,9 @@ in {
home-manager = {
useGlobalPkgs = true;
useUserPackages = true;
sharedModules = [
inputs.sops-nix.homeManagerModules.sops
];
};
programs.bash = {
@ -281,7 +284,6 @@ in {
settings.PasswordAuthentication = false;
settings.KbdInteractiveAuthentication = false;
settings.PermitRootLogin = "no";
extraConfig = "HostKey ${config.sops.secrets."ssh_keys/${hwconfig.hostname}".path}";
};
# Open ports in the firewall.