lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops: tweak SSH auth; add red solo SK-resident key

Browse source
This commit is contained in:
Luke Granger-Brown 2020-11-05 01:50:16 +00:00
parent c5f05e260d
commit bad3be7574
3 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ops/nixos/lib/client.nix
View file

@ -9,6 +9,7 @@ in
{
config = {
my.home-manager.imports = lib.mkAfter [ ./home-manager/client.nix ];
programs.ssh.startAgent = true;
nix.gc.automatic = false;
};
}

4
ops/nixos/lib/common.nix
View file

@ -57,8 +57,7 @@ in
};
environment.homeBinInPath = true;
security.doas.wheelNeedsPassword = false;
security.sudo.wheelNeedsPassword = false;
security.pam.enableSSHAgentAuth = true;
users.mutableUsers = false;
users.users = let secrets = depot.ops.secrets; in {
@ -74,6 +73,7 @@ in
../../secrets/lukegb_porcorosso_win.pub
../../secrets/lukegb_porcorosso_wsl.pub
../../secrets/lukegb_porcorosso_linux.pub
../../secrets/lukegb_red_solo.pub
];
};
deployer = {

1
ops/secrets/lukegb_red_solo.pub Normal file
View file

@ -0,0 +1 @@
sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBAgBXCPpGxeapXvRW8z+/ZFMXvZ9q+Z2mcn5ApCSKqkS7CQjlzTj7Z21/DRQEXQALALLyqfFhcDm1VZkEp/ruBYAAAAEc3NoOg== lukegb-red-solo-key