From 4ef51998100a26f5b0ee13d559fac0c1a424f78a Mon Sep 17 00:00:00 2001
From: steffen <steffen@portuus.de>
Date: Sat, 14 Mar 2026 14:28:56 +0100
Subject: [PATCH] fix deploy-rs: add StrictHostKeyChecking to sshOpts

deploy-rs ignores NIX_SSHOPTS and only uses its own sshOpts.
The host key verification prompt was blocking the non-interactive
CI pipeline. Adding accept-new to sshOpts directly.
---
 flake.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/flake.nix b/flake.nix
index d55310f..597bd18 100644
--- a/flake.nix
+++ b/flake.nix
@@ -127,6 +127,8 @@
             sshOpts = [
               "-p"
               "2299"
+              "-o"
+              "StrictHostKeyChecking=accept-new"
             ];
             profiles.system = {
               user = "root";