@@ -10,6 +10,10 @@
|
||||
}:
|
||||
{
|
||||
home-manager.users.${user} = {
|
||||
# gpg --full-generate-key
|
||||
# gpg --list-secret-keys --keyid-format LONG
|
||||
# gpg --export-secret-keys -a $signature > priv.key
|
||||
# gpg --export -a $signature > pub.key
|
||||
programs.gpg = {
|
||||
enable = true;
|
||||
homedir = "${home}/.local/share/gnupg";
|
||||
|
@@ -1,6 +1,6 @@
|
||||
install -d -m 700 "${GNUPGHOME}"
|
||||
|
||||
for dir in "${HOME}"/.config/sops-nix/secrets/gpg-agent/*; do
|
||||
for dir in "${HOME}"/.config/sops-nix/secrets/gpg/*; do
|
||||
keyfile="${dir}/key"
|
||||
passfile="${dir}/pass"
|
||||
|
||||
|
24
hosts/common/user/configs/console/ssh/default.nix
Normal file
24
hosts/common/user/configs/console/ssh/default.nix
Normal file
@@ -0,0 +1,24 @@
|
||||
{
|
||||
user ? throw "user argument is required",
|
||||
home ? throw "home argument is required",
|
||||
}:
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
{
|
||||
home-manager.users.${user} = {
|
||||
programs.ssh = {
|
||||
enable = true;
|
||||
addKeysToAgent = "yes";
|
||||
userKnownHostsFile = lib.strings.concatStringsSep " " [
|
||||
../../../../../eirene/secrets/ssh_host_ed25519_key.pub
|
||||
../../../../../elara/secrets/ssh_host_ed25519_key.pub
|
||||
];
|
||||
};
|
||||
|
||||
services.ssh-agent.enable = true;
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user