WIP janus secrets

2026-07-04 11:49:58 -05:00
parent cddc369687
commit 69f492c7cc
10 changed files with 318 additions and 58 deletions
@@ -1,13 +1,14 @@
 { inputs, ... }:
 let
  userName = "john";
-  sshHostCAPubKey = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ=";
+  sshHostCAPubKeyPath = ../hosts/janus/ssh_host_ca_key.pub;
 in
 {
  flake.modules.nixos.ssh = { config, pkgs, lib, ... }:
  let
    cfg = config.ssh;
    configDir = "/etc/ssh";
+    sshHostCAPubKey = lib.removeSuffix "\n" (builtins.readFile sshHostCAPubKeyPath);
  in
  {
    options.ssh = {
@@ -72,6 +73,7 @@ in
    identityFile = cfg.identityFile;
    publicKeyFile = "${identityFile}.pub";
    certificateFile = "${identityFile}-cert.pub";
+    sshHostCAPubKey = lib.removeSuffix "\n" (builtins.readFile sshHostCAPubKeyPath);
  in
  {
    options.ssh = with lib; {