79 lines
2.0 KiB
Nix
79 lines
2.0 KiB
Nix
{ user, home }:
|
|
{
|
|
config,
|
|
inputs,
|
|
system,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
hmConfig = config.home-manager.users.${user};
|
|
selfPkgs = inputs.self.packages.${system};
|
|
in
|
|
{
|
|
home-manager.users.${user} = {
|
|
sops.secrets = {
|
|
"ssh/personal/key" = {
|
|
sopsFile = "${inputs.secrets}/personal/secrets.yaml";
|
|
key = "ssh/key";
|
|
path = "${home}/.ssh/ssh_personal_ed25519_key";
|
|
};
|
|
|
|
"ssh/personal/pass" = {
|
|
sopsFile = "${inputs.secrets}/personal/secrets.yaml";
|
|
key = "ssh/pass";
|
|
};
|
|
|
|
"ssh/sas/ed25519/key" = {
|
|
sopsFile = "${inputs.secrets}/sas/secrets.yaml";
|
|
key = "ssh/ed25519/key";
|
|
path = "${home}/.ssh/ssh_sas_ed25519_key";
|
|
};
|
|
|
|
"ssh/sas/ed25519/pass" = {
|
|
sopsFile = "${inputs.secrets}/sas/secrets.yaml";
|
|
key = "ssh/ed25519/pass";
|
|
};
|
|
|
|
"ssh/sas/rsa/key" = {
|
|
sopsFile = "${inputs.secrets}/sas/secrets.yaml";
|
|
key = "ssh/rsa/key";
|
|
path = "${home}/.ssh/ssh_sas_rsa_key";
|
|
};
|
|
|
|
"ssh/sas/rsa/pass" = {
|
|
sopsFile = "${inputs.secrets}/sas/secrets.yaml";
|
|
key = "ssh/rsa/pass";
|
|
};
|
|
};
|
|
|
|
programs = {
|
|
ssh = {
|
|
matchBlocks = {
|
|
"karaolidis.com" = {
|
|
hostname = "karaolidis.com";
|
|
user = "nick";
|
|
identityFile = "${home}/.ssh/ssh_personal_ed25519_key";
|
|
};
|
|
|
|
"cldlgn.fyi.sas.com" = {
|
|
inherit user;
|
|
hostname = "cldlgn.fyi.sas.com";
|
|
identityFile = "${home}/.ssh/ssh_sas_ed25519_key";
|
|
};
|
|
};
|
|
|
|
userKnownHostsFiles =
|
|
with selfPkgs;
|
|
lib.lists.optionals config.sas.build.private [ ssh-known-hosts-sas-cldlgn ];
|
|
};
|
|
|
|
clipbook.bookmarks = {
|
|
"Personal SSH Key Passphrase".source = hmConfig.sops.secrets."ssh/personal/pass".path;
|
|
"SAS SSH ED25519 Key Passphrase".source = hmConfig.sops.secrets."ssh/sas/ed25519/pass".path;
|
|
"SAS SSH RSA Key Passphrase".source = hmConfig.sops.secrets."ssh/sas/rsa/pass".path;
|
|
};
|
|
};
|
|
};
|
|
}
|