hostKeyFile variable

This commit is contained in:
John Lancaster
2026-03-15 15:52:45 -05:00
parent 85a1127e1d
commit 8735ef24d5

View File

@@ -8,6 +8,7 @@ in
let let
cfg = config.ssh; cfg = config.ssh;
userCAPath = "ssh/ssh_user_ca.pub"; userCAPath = "ssh/ssh_user_ca.pub";
hostKeyFile = "ssh/ssh_host_ed25519_key";
in in
{ {
options.ssh = { options.ssh = {
@@ -28,11 +29,11 @@ in
{ {
PasswordAuthentication = false; PasswordAuthentication = false;
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
HostKey = "/etc/ssh/ssh_host_ed25519_key"; HostKey = "/etc/${hostKeyFile}";
} }
(lib.mkIf cfg.certificates.enable { (lib.mkIf cfg.certificates.enable {
TrustedUserCAKeys = "/etc/${userCAPath}"; TrustedUserCAKeys = "/etc/${userCAPath}";
HostCertificate = "/etc/ssh/ssh_host_ed25519_key-cert.pub"; HostCertificate = "/etc/${hostKeyFile}-cert.pub";
}) })
]; ];
}; };