snapshot pre-autoupdate-2026-07-26T12-46-58Z

modules/utilities/agenix.nix

@@ -2,9 +2,10 @@
   flake.nixosModules.agenix = {pkgs, ...}: {
     environment.systemPackages = [
       inputs.agenix.packages.${pkgs.system}.default
+      pkgs.age
     ];
   age.identityPaths = [
-    "/home/tomasr/.ssh/id_ed25519"
+    "/etc/ssh/ssh_host_ed25519_key"
   ];
     age.secrets.ntfy = {
       file = ../../secrets/ntfy.age;

modules/utilities/autoUpdate.nix

@@ -106,6 +106,7 @@
         nixos-rebuild
         curl
         libnotify
+        nix
       ];
 
       text = ''

modules/utilities/networking.nix

@@ -16,7 +16,15 @@ _: {
     networking.networkmanager.enable = true;
 
     # Enable the OpenSSH daemon.
-    # services.openssh.enable = true;
+    services.openssh = {
+      enable = true;
+      hostKeys = [
+        {
+          path = "/etc/ssh/ssh_host_ed25519_key";
+          type = "ed25519";
+        }
+      ];
+    };
 
     # Open ports in the firewall.
     # networking.firewall.allowedTCPPorts = [ ... ];

secrets/secrets.nix

@@ -1,8 +1,10 @@
 let
-  myKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC6WNm4YAQO85j0aNQkKSH7QnmhgzKA4hA2ggi6cDyKk tomasr@nixos";
+  backupAgeKey = "age1y4lhpk7awhjyu42p46ulg5q2c49r2lnwu8tyyk4ejj6jztd64uksfhd670";
+  laptopHostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCsewl8ZXXMjRyO20cBIiuW2gA4mGoMkxQ0dcMyNidR root@nixos";
 in
 {
   "ntfy.age".publicKeys = [
-    myKey
+    backupAgeKey
+    laptopHostKey
   ];
 }