lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ssh-ca-vault: disable SSH host key signing for now

Browse source
This commit is contained in:
Luke Granger-Brown 2022-03-14 21:28:37 +00:00
parent 8c6c7af3f7
commit f55dc46170
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
ops/nixos/lib/ssh-ca-vault.nix
View file

@ -6,7 +6,8 @@
let let
inherit (lib) listToAttrs nameValuePair mkAfter concatMapStrings; inherit (lib) listToAttrs nameValuePair mkAfter concatMapStrings;
keyTypes = [ "ed25519" "rsa" ]; #keyTypes = [ "ed25519" "rsa" ];
keyTypes = [ ];
hostKeyForKeyType = keyType: "/etc/ssh/ssh_host_${keyType}_key.pub"; hostKeyForKeyType = keyType: "/etc/ssh/ssh_host_${keyType}_key.pub";
secretNameForKeyType = keyType: "openssh-cert-${keyType}"; secretNameForKeyType = keyType: "openssh-cert-${keyType}";