moving to john-pc

modules/features/ssh.nix

@@ -215,8 +215,8 @@ in
       };
 
       config = {
-        home.file = lib.mkIf cfg.certificates.enable {
+        home.file.".ssh/known_hosts" = lib.mkIf cfg.certificates.enable {
-          ".ssh/known_hosts".text = knownHostsText;
+          text = knownHostsText;
         };
         programs.ssh = {
           enable = true;

modules/hosts/john-pc/default.nix

@@ -3,11 +3,8 @@ let
   username = "john";
   hostname = "john-pc-ubuntu";
 
-  # testTarget = "fded:fb16:653e:25da:be24:11ff:fe89:1cc3"; # soteria
-  # testTarget = "fded:fb16:653e:25da:be24:11ff:fea0:753f"; # test-nix
   testHost = "soteria"; # which host to test build
   testTarget = "test-nix";
-
 in
 {
   flake.modules.homeManager."${hostname}" = { config, pkgs, lib, ... }:
@@ -41,11 +38,7 @@ in
     home.packages = with pkgs; [
       nil # Nix language server
       selfPkgs.jsl-zsh
-      # selfPkgs.my-neovim
+      # selfPkgs.ssh-certs
-      selfPkgs.ssh-certs
-      # selfPkgs.step-bootstrap
-      # selfPkgs.wg-platform
-      # self'.packages.myWrappedPackage
       (inputs.self.wrappers.test-push.apply {
         inherit pkgs flakeDir;
         host = testHost;
@@ -56,20 +49,27 @@ in
     homeManagerFlakeDir = flakeDir;
     docker.enable = true;
 
-    ssh = {
+    programs.ssh.settings."*" = {
-      certificates.enable = true;
+      IdentityAgent = "${config.home.homeDirectory}/.1password/agent.sock";
-      knownHosts = [
-        "@cert-authority fded:fb16:653e:25da:be24:11ff:* ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ="
-      ];
-      matchSets = {
-        certs = true;
-        appdaemon = true;
-        homelab = true;
-        dev = true;
-        tailscale = true;
-      };
     };
 
+    ssh-new = {
+      certificates.enable = true;
+    };
+    # ssh = {
+    #   certificates.enable = true;
+    #   knownHosts = [
+    #     "@cert-authority fded:fb16:653e:25da:be24:11ff:* ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ="
+    #   ];
+    #   matchSets = {
+    #     certs = true;
+    #     appdaemon = true;
+    #     homelab = true;
+    #     dev = true;
+    #     tailscale = true;
+    #   };
+    # };
+
     # This provides the keys at build time and will be included in the nix store
     sops.defaultSopsFile = ../../../keys/secrets.yaml;
 

modules/programs/sops.nix

@@ -35,9 +35,10 @@ in
 
       config =
         let
+          identityFile = config.ssh-new.keyFile;
           my-sops = (inputs.self.wrappers.mySops.apply {
             inherit pkgs;
-            sshKey = config.ssh.identityFile;
+            sshKey = identityFile;
           }).wrapper;
         in
         {
@@ -46,7 +47,7 @@ in
           sops = {
             defaultSopsFile = ../../keys/secrets.yaml;
             defaultSopsFormat = "yaml";
-            age.sshKeyPaths = [ "${config.ssh.identityFile}" ];
+            age.sshKeyPaths = [ identityFile ];
           };
 
           home.packages = with pkgs; [

modules/users/john.nix

@@ -36,10 +36,10 @@ in
         selfPkgs = inputs.self.packages.${pkgs.stdenv.hostPlatform.system};
       in {
         home.stateVersion = "25.11";
-        imports = [
+        imports = with inputs.self.modules.homeManager; [
-          inputs.self.modules.homeManager.shell-tools
+          ssh-new
-          inputs.self.modules.homeManager.ssh
+          shell-tools
-          inputs.self.modules.homeManager.git
+          git
         ];
         xdg.enable = true;
         home.packages = [