27 lines
652 B
Nix
27 lines
652 B
Nix
{
|
|
lib,
|
|
config,
|
|
systemConfig,
|
|
...
|
|
}: {
|
|
imports = [
|
|
./builders.nix
|
|
];
|
|
programs.ssh = {
|
|
controlMaster = "auto";
|
|
controlPersist = "10m";
|
|
matchBlocks."*" = lib.hm.dag.entryAfter ["build-nas" "build-rainbow-resort" "build-aarch64" "build-riscv"] {
|
|
identityFile =
|
|
if config.home.username == "root"
|
|
then systemConfig.sops.secrets.".ssh/id_ed25519_sk".path
|
|
else config.sops.secrets.".ssh/id_ed25519_sk".path;
|
|
};
|
|
enable = true;
|
|
};
|
|
sops.secrets = lib.mkIf (config.home.username != "root") {
|
|
".ssh/id_ed25519_sk" = {
|
|
mode = "600";
|
|
sopsFile = ./shared-keys.yaml;
|
|
};
|
|
};
|
|
}
|