Add lanzaboote

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/elara/configs/ssh/default.nix

@@ -8,16 +8,28 @@
 let
   selfPkgs = inputs.self.packages.${system};
 in
-# Configured for the root user to allow private builds
 {
-  sops.secrets."ssh/sas/ed25519/key" = {
-    sopsFile = "${inputs.secrets}/sas/secrets.yaml";
-    key = "ssh/ed25519/key";
-    path = "/root/.ssh/ssh_sas_ed25519_key";
+  sops.secrets = {
+    "ssh/personal/key" = {
+      sopsFile = "${inputs.secrets}/personal/secrets.yaml";
+      key = "ssh/key";
+      path = "/root/.ssh/ssh_personal_ed25519_key";
+    };
+
+    "ssh/sas/ed25519/key" = {
+      sopsFile = "${inputs.secrets}/sas/secrets.yaml";
+      key = "ssh/ed25519/key";
+      path = "/root/.ssh/ssh_sas_ed25519_key";
+    };
   };
 
   programs.ssh = {
     extraConfig = ''
+      Host karaolidis.com
+        User git
+        HostName karaolidis.com
+        IdentityFile /root/.ssh/ssh_personal_ed25519_key
+
       Host github.com
         User git
         HostName github.com

hosts/elara/default.nix

@@ -21,6 +21,7 @@
     ../common/configs/system/git
     ../common/configs/system/gpg-agent
     ../common/configs/system/impermanence
+    ../common/configs/system/lanzaboote
     ../common/configs/system/libvirt
     ../common/configs/system/neovim
     ../common/configs/system/networkmanager
@@ -47,9 +48,9 @@
     ../common/configs/system/users
     ../common/configs/system/zsh
 
-    ./configs/git
     "${inputs.secrets}/hosts/elara/configs/globalprotect"
     ./configs/pki
+    ./configs/ssh
 
     ./users/nikara
   ];