From 6304c65ea67318aaea82e8e1b06967a230010955 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tom=C3=A1s=20Rivera?= <tomas.riveral@icloud.com>
Date: Sun, 26 Jul 2026 14:46:58 +0200
Subject: [PATCH] snapshot pre-autoupdate-2026-07-26T12-46-58Z

---
 modules/utilities/agenix.nix     |   3 ++-
 modules/utilities/autoUpdate.nix |   1 +
 modules/utilities/networking.nix |  10 +++++++++-
 secrets/ntfy.age                 | Bin 328 -> 426 bytes
 secrets/secrets.nix              |   6 ++++--
 5 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/modules/utilities/agenix.nix b/modules/utilities/agenix.nix
index 0ca0d21..0e22b1b 100644
--- a/modules/utilities/agenix.nix
+++ b/modules/utilities/agenix.nix
@@ -2,9 +2,10 @@
   flake.nixosModules.agenix = {pkgs, ...}: {
     environment.systemPackages = [
       inputs.agenix.packages.${pkgs.system}.default
+      pkgs.age
     ];
   age.identityPaths = [
-    "/home/tomasr/.ssh/id_ed25519"
+    "/etc/ssh/ssh_host_ed25519_key"
   ];
     age.secrets.ntfy = {
       file = ../../secrets/ntfy.age;
diff --git a/modules/utilities/autoUpdate.nix b/modules/utilities/autoUpdate.nix
index 290c8a2..494072f 100644
--- a/modules/utilities/autoUpdate.nix
+++ b/modules/utilities/autoUpdate.nix
@@ -106,6 +106,7 @@
         nixos-rebuild
         curl
         libnotify
+        nix
       ];
 
       text = ''
diff --git a/modules/utilities/networking.nix b/modules/utilities/networking.nix
index c613242..e2fb441 100644
--- a/modules/utilities/networking.nix
+++ b/modules/utilities/networking.nix
@@ -16,7 +16,15 @@ _: {
     networking.networkmanager.enable = true;
 
     # Enable the OpenSSH daemon.
-    # services.openssh.enable = true;
+    services.openssh = {
+      enable = true;
+      hostKeys = [
+        {
+          path = "/etc/ssh/ssh_host_ed25519_key";
+          type = "ed25519";
+        }
+      ];
+    };
 
     # Open ports in the firewall.
     # networking.firewall.allowedTCPPorts = [ ... ];
diff --git a/secrets/ntfy.age b/secrets/ntfy.age
index 95ecee6a62d25fecbcd60c13b1fdbca3bc690560..543c5dd3c9a0e8443a61e64e6d1b633c4c7a4ebb 100644
GIT binary patch
delta 411
zcmV;M0c8Hj0;&U$8Gl$ZH8n9gAYwCZQBrecN_ALPVK_lTXGu+0GEZ7fS4?G3P%=?P
zIdCvyZdG|&XJc(=3U@GLML|<}ZcbAxId@TTFk?YYL}WB#S8FgtK}lmWS~q%GRAgmo
zNo#X!3N1b$b8~1dWn?lnH8D9LD|B{LXlEcYL_%pWF>+@{QhzfvR8})MSTb{YV^mQ~
zcU5IYHDysYLP1$@a&mcPV^mQJG;C}yPIPlsST=GqG;vc#aB_G^YgTebK~i{dM{6%m
zG;U3KZcuJ7Hg-`8EiEk|P-Aa$Wl=IXWJE=8b$Dw_Z%Ir}D_Toqc{f;MNH8~RWjSO}
zR#JIWNm^qHbARQ+)U0zRppgCfH|$lC5hL?zhV`MqEkvTwW|)v6#0k$i9H#1dX5ex3
z4zW`-^1Kp?QD1A(j1`mN@Y-t{5&zq|0cTe=SaFs4_!E70bq{_&*^X#SX1+<@^d0RF
z@Tq!RmbGg%D&kIOZ+8A;Z6G}lIh0vz+9v7bH!@gYM-<{4oc84B{7E7?0hMVfaTL1=
F=7E*7o@@XB

delta 312
zcmV-80muHT1IPl98GmzgXf0)AGBq_ZIUsOjP;p{GAWBg~RBT!_Q&Ux9M0i$aSTkf(
zX=61~Vrn>TQekv&D@txLOEyU}ac47Q3N<S*LNrKIOE*YQY*jciR&#MSL{>^?RBcCc
zS9wixWmi{FG)pl!Wp`<J3N0-yAaHe9IY)AIHZf~2H7j9ZbbnG}X*W$mF+wYEdTK~*
zQ#D6uGi*h8R#R|RNebA=V}R;%)h!Ccwe7`GLeG*64To%8Oa8ukTs!iJ-{E8*+Xrd3
z*_2i&co16v@?N;X+;9F;U*`UoE(&Bi6oIG_B2iUSl-9~^Ps4rjw8H(<1lGRyw&H<Q
zhX};*=X@VClQHb#o!uaDf(4IQDSf*9dss)#5zN0?NHQzJE!*NRKTB@07Fo1PQMik4
KkI(+tkD~~1Sb(+w

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 4eb7bc6..3b02e39 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -1,8 +1,10 @@
 let
-  myKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC6WNm4YAQO85j0aNQkKSH7QnmhgzKA4hA2ggi6cDyKk tomasr@nixos";
+  backupAgeKey = "age1y4lhpk7awhjyu42p46ulg5q2c49r2lnwu8tyyk4ejj6jztd64uksfhd670";
+  laptopHostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCsewl8ZXXMjRyO20cBIiuW2gA4mGoMkxQ0dcMyNidR root@nixos";
 in
 {
   "ntfy.age".publicKeys = [
-    myKey
+    backupAgeKey
+    laptopHostKey
   ];
 }