feat: automate SSH config ('known_hosts', 'authorized_keys' ...)

hosts/andromache/default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   inputs,
+  outputs,
   config,
   pkgs,
   ...
@@ -81,7 +82,9 @@ in
   home-manager = {
     useGlobalPkgs = true;
     useUserPackages = true;
-    extraSpecialArgs = { inherit inputs; };
+    extraSpecialArgs = {
+      inherit inputs outputs;
+    };
     users.${username} = import ../../home/hosts/andromache {
       inherit lib;
       inherit inputs;
@@ -90,6 +93,8 @@ in
     };
   };
 
+  ssh.authorizedHosts = [ "astyanax" ];
+
   services.xserver = {
     videoDrivers = [ "nvidia" ];
   };

hosts/astyanax/default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   inputs,
+  outputs,
   config,
   pkgs,
   ...
@@ -75,7 +76,9 @@ in
   home-manager = {
     useGlobalPkgs = true;
     useUserPackages = true;
-    extraSpecialArgs = { inherit inputs; };
+    extraSpecialArgs = {
+      inherit inputs outputs;
+    };
     users.${username} = import ../../home/hosts/astyanax {
       inherit inputs;
       inherit config;
@@ -88,6 +91,8 @@ in
     hostId = "80eef97e";
   };
 
+  ssh.authorizedHosts = [ "andromache" ];
+
   services = {
     fwupd.enable = true;
     openssh = {

hosts/astyanax/ssh_host.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO8+UOyZbvQeHfFfYox3SQi42KJ0S3RZj79iswSsZeFy root@nixos

hosts/astyanax/ssh_user.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIzP1PjIDb1tN9nhPOK88HYDtTNk9SN9ZpEem2id49Fa h@astyanax

hosts/hecuba/default.nix

@@ -1,4 +1,11 @@
-{ pkgs, ... }:
+{
+  lib,
+  inputs,
+  outputs,
+  config,
+  pkgs,
+  ...
+}:
 
 # Also see <https://wiki.nixos.org/wiki/Install_NixOS_on_Hetzner_Cloud>
 
@@ -31,12 +38,14 @@
     username = {
       isNormalUser = true;
       extraGroups = [ "wheel" ];
-      openssh.authorizedKeys.keys = [
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOOXPEhdKOVnb6mkeLLUcFGt+mnUR5pMie17JtjrxwgO h@andromache"
-      ];
     };
   };
 
+  ssh = {
+    username = "username";
+    authorizedHosts = [ "andromache" ];
+  };
+
   security.sudo.wheelNeedsPassword = false;
 
   networking = {
@@ -57,4 +66,6 @@
     enable = true;
     harden = true;
   };
+
+  networking.hostName = "hecuba";
 }

hosts/vm/default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   inputs,
+  outputs,
   config,
   pkgs,
   ...
@@ -58,7 +59,9 @@ in
   home-manager = {
     useGlobalPkgs = true;
     useUserPackages = true;
-    extraSpecialArgs = { inherit inputs; };
+    extraSpecialArgs = {
+      inherit inputs outputs;
+    };
     users.${username} = import ../../home/hosts/vm {
       inherit inputs;
       inherit config;