noah/dotfiles
1
0
Fork 0
mirror of https://github.com/nmasur/dotfiles synced 2025-07-05 17:20:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

use ssh host key as identityfile on tempest

Browse Source 
reencrypt secrets and use personal key for mail
This commit is contained in:
Noah Masur
2023-08-05 20:06:03 -04:00
parent 5bc10bef87
commit c845ae2fd4
23 changed files with 239 additions and 203 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
hosts/tempest/default.nix
View File

@ -67,8 +67,6 @@ inputs.nixpkgs.lib.nixosSystem {
};
# Secrets must be prepared ahead before deploying
# The SSH key will need to be added manually with: nix run .#loadkey
identityFile = "/home/${globals.user}/.ssh/id_ed25519";
passwordHash = inputs.nixpkgs.lib.fileContents ../../misc/password.sha512;
# Theming
@ -111,10 +109,9 @@ inputs.nixpkgs.lib.nixosSystem {
leagueoflegends.enable = true;
ryujinx.enable = true;
};
# Services will require the identityFile to work
services.vmagent.enable = true; # Enables Prometheus metrics
services.openssh.enable = true; # Required for Cloudflare tunnel
services.openssh.enable =
true; # Required for Cloudflare tunnel and identity file
# Allows private remote access over the internet
cloudflareTunnel = {