nix: add ssh key for hostKeys

benmezger · Jan 27, 2025 · be6c570 · be6c570
1 parent 3dc3bdd
commit be6c570
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 2 deletions.
diff --git a/chezmoi/.chezmoi.yaml.tmpl b/chezmoi/.chezmoi.yaml.tmpl
@@ -123,4 +123,5 @@ data:
     openai_token: op://3kygcny5whqjpzj5nq72uu6kua/mulbti6akdit5tdwdfyvgeovvy/credential
     github_i3_repo_token: op://3kygcny5whqjpzj5nq72uu6kua/dsoe27jnupc4stsbvnmqsygq2i/credential
     libera_passwd: op://3kygcny5whqjpzj5nq72uu6kua/xtcoye3olsb73o5qroxdt3jsx4/password
+    nixos_ssh: op://3kygcny5whqjpzj5nq72uu6kua/jskgbl7j5kpb4b7kj6vyn4k3ni
 {{- end -}}
diff --git a/chezmoi/dot_ssh/nixos_rsa.pub.tmpl b/chezmoi/dot_ssh/nixos_rsa.pub.tmpl
@@ -0,0 +1 @@
+{{ onepasswordRead (join "/" (list .onepassword.nixos_ssh "public_key")) }}
diff --git a/chezmoi/dot_ssh/nixos_rsa.tmpl b/chezmoi/dot_ssh/nixos_rsa.tmpl
@@ -0,0 +1 @@
+{{ onepasswordRead (join "/" (list .onepassword.nixos_ssh "private_key")) }}
diff --git a/hosts/default/bootloader.nix b/hosts/default/bootloader.nix
@@ -15,7 +15,7 @@
       # to prevent connection drop
       # fixes: usb 1-10.2: 3:1: cannot get freq at ep 0x3
       "usbhid.quirks=0x1532:0x00ab:0x00000400"
-      "ip=192.168.0.168::192.168.0.1:255.255.255.0:${userConf.hostname}.local::none"
+      "ip=192.168.0.168::192.168.0.1:255.255.255.0:${userConf.hostname}.grub::none"
     ];
     supportedFilesystems = [ "btrfs" ];
     kernelModules = [
@@ -36,7 +36,7 @@
           enable = true;
           port = 22;
           authorizedKeys = userConf.sshKeys;
-          hostKeys = [ "/etc/secrets/initrd/host_rsa_key" ];
+          hostKeys = [ "/home/${userConf.username}/.ssh/nixos_rsa" ];
         };
       };
       availableKernelModules = [
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		{{ onepasswordRead (join "/" (list .onepassword.nixos_ssh "public_key")) }}