37 lines
760 B
Nix
37 lines
760 B
Nix
{
|
|
lib,
|
|
config,
|
|
systemConfig,
|
|
...
|
|
}:
|
|
{
|
|
imports = [
|
|
./builders.nix
|
|
];
|
|
programs.ssh = {
|
|
controlMaster = "auto";
|
|
controlPersist = "10m";
|
|
matchBlocks."*" =
|
|
lib.hm.dag.entryAfter
|
|
[
|
|
"build-nas"
|
|
"build-rainbow-resort"
|
|
"build-aarch64"
|
|
"build-riscv"
|
|
]
|
|
{
|
|
identityFile =
|
|
if config.home.username == "root" then
|
|
systemConfig.sops.secrets.".ssh/id_ed25519_sk".path
|
|
else
|
|
config.sops.secrets.".ssh/id_ed25519_sk".path;
|
|
};
|
|
enable = true;
|
|
};
|
|
sops.secrets = lib.mkIf (config.home.username != "root") {
|
|
".ssh/id_ed25519_sk" = {
|
|
mode = "600";
|
|
sopsFile = ./shared-keys.yaml;
|
|
};
|
|
};
|
|
}
|