From fe73ac908fb09f3ddacbad5582e2dabac5f4ea25 Mon Sep 17 00:00:00 2001 From: Kj Tsanaktsidis Date: Sun, 7 Sep 2025 18:03:24 +1000 Subject: ssh key management --- kj-laptop01/home.nix | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 kj-laptop01/home.nix (limited to 'kj-laptop01/home.nix') diff --git a/kj-laptop01/home.nix b/kj-laptop01/home.nix new file mode 100644 index 0000000..e21b0ba --- /dev/null +++ b/kj-laptop01/home.nix @@ -0,0 +1,28 @@ +{ + config, + pkgs, + ... +}: +{ + home.username = "kjtsanaktsidis"; + home.homeDirectory = "/home/kjtsanaktsidis"; + home.stateVersion = "25.05"; + + programs.home-manager.enable = true; + + # Configure sops for home-manager + sops = { + age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; + defaultSopsFile = ./secrets.yaml; + secrets = { + kj_id_ed25519 = { + path = "${config.home.homeDirectory}/.ssh/id_ed25519"; + }; + }; + }; + + # SSH public key (private key is managed by sops) + home.file.".ssh/id_ed25519.pub" = { + text = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMtGcEXu5S/0zsF6Suxc65DmGFGt1JWRnqadoVhErOed kjtsanaktsidis@KJMacbookGroq.local"; + }; +} -- cgit v1.2.3