moved sign-ssh-cert

modules/services/ssh.nix

@@ -45,6 +45,10 @@ in
           certAuthority = true;
           publicKey = sshHostCAPubKey;
         };
+        "*.john-stream.com" = {
+          certAuthority = true;
+          publicKey = sshHostCAPubKey;
+        };
       };
     };
   };
@@ -85,23 +89,6 @@ in
       provisionerPasswordPath = config.sops.secrets."janus/admin_jwk".path;
       sshHostProvisioner = config.step-client.sshHostProvisioner;
     in {
-      sops.secrets."janus/admin_jwk" = {
-        mode = "0400";
-      };
-
-      home.packages = lib.optionals cfg.certificates.enable [
-        (pkgs.writeShellScriptBin "sign-ssh-cert" ''
-          ${lib.getExe pkgs.step-cli} ssh certificate \
-          --sign \
-          --principal ${userName} \
-          --principal root \
-          --principal appdaemon \
-          --provisioner "${sshHostProvisioner}" \
-          --provisioner-password-file "${provisionerPasswordPath}" \
-          ${userName} ${publicKeyFile}
-        '')
-      ];
-
       home.file.".ssh/known_hosts" = {
         text = lib.concatStringsSep "\n" (
           [