ssh cert consolidation

modules/services/ssh.nix

@@ -48,7 +48,7 @@ in
         userCA = lib.mkOption {
           description = "Content for the SSH user CA file (public key)";
           type = lib.types.path;
-          default = ../hosts/janus/ssh_user_ca_key.pub;
+          default = sshHostCAPubKeyPath;
         };
         userCAFile = lib.mkOption {
           description = "String path to the SSh user CA";
@@ -139,10 +139,7 @@ in
       };
     };
 
-    # All this stuff has to be wrapped in a config attribute because of the presence of the options here?
-    config = let
-      provisionerPasswordPath = config.sops.secrets."janus/admin_jwk".path;
-    in {
+    config = {
       home.file.".ssh/known_hosts" = {
         text = lib.concatStringsSep "\n" (
           cfg.knownHosts ++ lib.optionals cfg.certificates.enable [
@@ -198,7 +195,7 @@ in
           })
           (lib.mkIf cfg.matchSets.certs {
             "janus" = {
-              HostName = "janus.john-stream.com";
+              HostName = "fded:fb16:653e:25da:be24:11ff:fe6b:4d57";
               User = "root";
             };
             "soteria" = {