30 lines
720 B
Nix
30 lines
720 B
Nix
{
|
|
lib,
|
|
config,
|
|
...
|
|
}:
|
|
|
|
let
|
|
inherit (config.host) username;
|
|
adminHosts = (import ../../utils { inherit lib; }).adminHosts ../../hosts;
|
|
in
|
|
{
|
|
options.ssh = {
|
|
authorizedHosts = lib.mkOption {
|
|
type = lib.types.listOf lib.types.str;
|
|
default = [ ];
|
|
};
|
|
};
|
|
|
|
# auto generate authorized_keys from `authorizedHosts`
|
|
config.users.users.${username}.openssh.authorizedKeys.keys = lib.flatten (
|
|
map (
|
|
hostname:
|
|
let
|
|
keyFile = ../../hosts/${hostname}/ssh_user.pub;
|
|
in
|
|
lib.optionals (builtins.pathExists keyFile) (lib.splitString "\n" (builtins.readFile keyFile))
|
|
) ((builtins.filter (h: h != config.host.name) adminHosts) ++ config.ssh.authorizedHosts)
|
|
);
|
|
}
|