- Move forgejo-deploy pubkey from users/steffen to hosts/cryodev-main/ (deploy key belongs to the host, not a user) - Remove deploy key from steffen's authorized keys - Add users ralph and benjamin (pubkeys pending) - Register both new users in cryodev-main host config
17 lines
252 B
Nix
17 lines
252 B
Nix
{
|
|
outputs,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
outputs.nixosModules.openssh
|
|
];
|
|
|
|
services.openssh.enable = true;
|
|
|
|
# Root SSH key for deploy-rs (key-only, no password)
|
|
users.users.root.openssh.authorizedKeys.keyFiles = [
|
|
../deploy-key.pub
|
|
];
|
|
}
|