hektor/nix
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: prefer hardware-backed ssh keys

Browse Source
This commit is contained in:
Hektor Misplon
2026-04-10 23:05:18 +02:00
parent 28dc9d9570
commit 13f246e2ba
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
home/modules/ssh/default.nix
View File

@@ -39,6 +39,10 @@ in
// { // {
"*" = { "*" = {
addKeysToAgent = "yes"; addKeysToAgent = "yes";
identityFile = [
"~/.ssh/id_ed25519_sk"
"~/.ssh/id_ed25519"
];
}; };
}; };
}; };

3
modules/ssh/extract-keys.nix
View File

@@ -14,7 +14,10 @@ in
chmod 644 "$HOST_DIR/ssh_host.pub" chmod 644 "$HOST_DIR/ssh_host.pub"
fi fi
USER_KEY="/home/${username}/.ssh/id_ed25519_sk.pub"
if [ ! -f "$USER_KEY" ]; then
USER_KEY="/home/${username}/.ssh/id_ed25519.pub" USER_KEY="/home/${username}/.ssh/id_ed25519.pub"
fi
if [ -f "$USER_KEY" ] && [ -d "$HOST_DIR" ]; then if [ -f "$USER_KEY" ] && [ -d "$HOST_DIR" ]; then
cp "$USER_KEY" "$HOST_DIR/ssh_user.pub" cp "$USER_KEY" "$HOST_DIR/ssh_user.pub"
chown ${username}:users "$HOST_DIR/ssh_user.pub" chown ${username}:users "$HOST_DIR/ssh_user.pub"