diff --git a/modules/utilities/agenix.nix b/modules/utilities/agenix.nix index 0ca0d21..0e22b1b 100644 --- a/modules/utilities/agenix.nix +++ b/modules/utilities/agenix.nix @@ -2,9 +2,10 @@ flake.nixosModules.agenix = {pkgs, ...}: { environment.systemPackages = [ inputs.agenix.packages.${pkgs.system}.default + pkgs.age ]; age.identityPaths = [ - "/home/tomasr/.ssh/id_ed25519" + "/etc/ssh/ssh_host_ed25519_key" ]; age.secrets.ntfy = { file = ../../secrets/ntfy.age; diff --git a/modules/utilities/autoUpdate.nix b/modules/utilities/autoUpdate.nix index 290c8a2..494072f 100644 --- a/modules/utilities/autoUpdate.nix +++ b/modules/utilities/autoUpdate.nix @@ -106,6 +106,7 @@ nixos-rebuild curl libnotify + nix ]; text = '' diff --git a/modules/utilities/networking.nix b/modules/utilities/networking.nix index c613242..e2fb441 100644 --- a/modules/utilities/networking.nix +++ b/modules/utilities/networking.nix @@ -16,7 +16,15 @@ _: { networking.networkmanager.enable = true; # Enable the OpenSSH daemon. - # services.openssh.enable = true; + services.openssh = { + enable = true; + hostKeys = [ + { + path = "/etc/ssh/ssh_host_ed25519_key"; + type = "ed25519"; + } + ]; + }; # Open ports in the firewall. # networking.firewall.allowedTCPPorts = [ ... ]; diff --git a/secrets/ntfy.age b/secrets/ntfy.age index 95ecee6..543c5dd 100644 Binary files a/secrets/ntfy.age and b/secrets/ntfy.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 4eb7bc6..3b02e39 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -1,8 +1,10 @@ let - myKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC6WNm4YAQO85j0aNQkKSH7QnmhgzKA4hA2ggi6cDyKk tomasr@nixos"; + backupAgeKey = "age1y4lhpk7awhjyu42p46ulg5q2c49r2lnwu8tyyk4ejj6jztd64uksfhd670"; + laptopHostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCsewl8ZXXMjRyO20cBIiuW2gA4mGoMkxQ0dcMyNidR root@nixos"; in { "ntfy.age".publicKeys = [ - myKey + backupAgeKey + laptopHostKey ]; }