extra principals for SSH host certs

2026-07-02 08:38:06 -05:00
parent 4e5f1230ab
commit 3f3d847134
2 changed files with 20 additions and 2 deletions
@@ -63,6 +63,10 @@ in
        sops.defaultSopsFile = ../../../keys/secrets.yaml;
        step-ssh-host = {
          hostname = hostname;
+          extraPrincipals = [
+            "192.168.1.244"
+            "fded:fb16:653e:25da:be24:11ff:fea0:753f"
+          ];
        };
        mtls = {
          enable = true;
@@ -73,6 +77,10 @@ in
          ];
        };

+        # users.users."${username}".openssh.authorizedKeys.keys = [
+        #   "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMOkGLo4N/L3RYvaIZ1FmePlxa1HK0fMciZxKtRhN58F root@janus"
+        # ];
+
        home-manager.users."${username}" = {
          imports = with inputs.self.modules.homeManager; [
            mysops