john/dendritic
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

commiting public keys/certs for janus

Browse Source
This commit is contained in:
John Lancaster
2026-07-04 10:38:29 -05:00
parent 3f767dfc43
commit cddc369687
6 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+1
View File
@@ -1,2 +1,3 @@
result/ result/
.devenv/ .devenv/
*.gz
modules/hosts/janus/README.md
+1 -1
View File
@@ -37,7 +37,7 @@ Then update public artifacts in repo from generated output:
```shell ```shell
step certificate fingerprint /tmp/janus-step-ca-bootstrap/step/certs/root_ca.crt step certificate fingerprint /tmp/janus-step-ca-bootstrap/step/certs/root_ca.crt
``` ```
- `modules/hosts/janus/ssh_user_ca.pub` from `/tmp/janus-step-ca-bootstrap/step/certs/ssh_user_ca_key.pub` - `modules/hosts/janus/ssh_user_ca_key.pub` from `/tmp/janus-step-ca-bootstrap/step/certs/ssh_user_ca_key.pub`
## Back up the root CA key offline ## Back up the root CA key offline
modules/hosts/janus/intermediate_ca.crt
+12
View File
@@ -0,0 +1,12 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
modules/hosts/janus/ssh_host_ca_key.pub
+1
View File
@@ -0,0 +1 @@
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNug18oLH0vZxnibXJzMJvTWFPZTnSlhCDDVi+rHhgnIum6ZXQ4SF+VHOOAM5BbzZmMKitNJ5lcrGP15Eur7DzQ=
modules/hosts/janus/ssh_user_ca.pub → modules/hosts/janus/ssh_user_ca_key.pub
+1 -1
View File
@@ -1 +1 @@
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNpgz9xYE3K+JeQ7vtDA07iWlp0xTXB+G8MBzX6/RluXs8E6v+ahx90M093EYIOImaW6npWQ0JnFtmZaet5l9Ao= ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNpgz9xYE3K+JeQ7vtDA07iWlp0xTXB+G8MBzX6/RluXs8E6v+ahx90M093EYIOImaW6npWQ0JnFtmZaet5l9Ao=
modules/services/ssh.nix
+2 -2
View File
@@ -21,12 +21,12 @@ in
userCA = lib.mkOption { userCA = lib.mkOption {
description = "Content for the SSH user CA file (public key)"; description = "Content for the SSH user CA file (public key)";
type = lib.types.path; type = lib.types.path;
default = ../hosts/janus/ssh_user_ca.pub; default = ../hosts/janus/ssh_user_ca_key.pub;
}; };
userCAFile = lib.mkOption { userCAFile = lib.mkOption {
description = "String path to the SSh user CA"; description = "String path to the SSh user CA";
type = lib.types.str; type = lib.types.str;
default = "ssh_user_ca.pub"; default = "ssh_user_ca_key.pub";
}; };
}; };
}; };