plumjam/nixos - Change ZBZAKBTWMFRBVZ66JMLA22M3JRULPIH7G7OBU2AT3AHHEA3E4KOQC

hosts: better pub ssh key handling

Created by James Plummer on August 31, 2025

ZBZAKBTWMFRBVZ66JMLA22M3JRULPIH7G7OBU2AT3AHHEA3E4KOQC

Dependencies

In channels

main

Change contents

Replacement in secrets.nix at line 2 [4.1]

B:BD[4.6] → [4.6:99]

B:BD[4.99] → [5.1:104]

B:BD[5.104] → [6.1:104]

B:BD[6.104] → [3.1:104]

∅:D[7.103] → [4.99:121]

∅:D[8.104] → [4.99:121]

∅:D[3.104] → [4.99:121]

∅:D[5.104] → [4.99:121]

∅:D[6.104] → [4.99:121]

B:BD[4.99] → [4.99:121]

	james = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4";
	plum  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBH1S3dhOYCCltqrseHc3YZFHc9XU90PsvDo7frzUGrr root@plum";
	pear  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL2/Pg/5ohT3Dacnzjw9pvkeoQ1hEFwG5l1vRkr3v2sQ root@pear";
	kiwi  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ1AbTRPJiOAPE0u1HHqoMBeXhlenugGvIndnJVLETld root@kiwi";
	# users = [ james ];

[4.6]

[4.121]

	inherit (import ./keys.nix) james plum pear kiwi all admins;

Replacement in secrets.nix at line 5 [4.1]

B:BD[4.126] → [7.104:161]

B:BD[7.161] → [9.1:58]

∅:D[9.58] → [8.162:332]

B:BD[8.162] → [8.162:332]

  "hosts/plum/password.age".publicKeys = [ james plum ];
  "hosts/kiwi/password.age".publicKeys = [ james kiwi ];
  "hosts/plum/id.age".publicKeys       = [ james plum ];
  "hosts/pear/id.age".publicKeys       = [ james pear ];
	"hosts/kiwi/id.age".publicKeys       = [ james kiwi ];

[4.126]

[4.178]

  "hosts/plum/password.age".publicKeys = [ plum ] ++ admins;
  "hosts/kiwi/password.age".publicKeys = [ kiwi ] ++ admins;
  "hosts/plum/id.age".publicKeys       = [ plum ] ++ admins;
  "hosts/pear/id.age".publicKeys       = [ pear ] ++ admins;
	"hosts/kiwi/id.age".publicKeys       = [ kiwi ] ++ admins;

File addition: keys.nix (----------)

[10.2]

let 
	keys = {
		james = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4";
		plum  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBH1S3dhOYCCltqrseHc3YZFHc9XU90PsvDo7frzUGrr root@plum";
		pear  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL2/Pg/5ohT3Dacnzjw9pvkeoQ1hEFwG5l1vRkr3v2sQ root@pear";
		kiwi  = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ1AbTRPJiOAPE0u1HHqoMBeXhlenugGvIndnJVLETld root@kiwi";
	};
in keys // {
		admins = [ keys.james ];
		all    = builtins.attrValues keys;
	}

Insertion in hosts/plum/configuration.nix at line 4 [11.1247]
[7.1078]
[2.12]
```
	inherit (import ../../keys.nix) james;
```

Replacement in hosts/plum/configuration.nix at line 37 [11.1247]

∅:D[4.736] → [11.1721:1853]

B:BD[11.1721] → [11.1721:1853]

    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4"
    ];

[4.736]

[11.1853]

    openssh.authorizedKeys.keys = [ james ];

Replacement in hosts/plum/configuration.nix at line 41 [11.1247]

B:BD[7.1353] → [7.1353:1478]

		openssh.authorizedKeys.keys = [
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4"
		];

[7.1353]

[7.1478]

		openssh.authorizedKeys.keys = [ james ];

Insertion in hosts/pear/configuration.nix at line 9 [10.83451]
[6.1031]
[2.174]
```
  inherit (import ../../keys.nix) james;
```

Insertion in hosts/pear/configuration.nix at line 80 [10.83451]

[10.84556]

    openssh.authorizedKeys.keys = [ james ];
  };
  users.users.root = {
    openssh.authorizedKeys.keys = [ james ];

Insertion in hosts/kiwi/configuration.nix at line 4 [8.4566]
[8.4636]
[2.349]
```
	inherit (import ../../keys.nix) james;
```

Replacement in hosts/kiwi/configuration.nix at line 37 [8.4566]

B:BD[8.5354] → [8.5354:5486]

    openssh.authorizedKeys.keys = [
      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4"
    ];

[8.5354]

[8.5486]

    openssh.authorizedKeys.keys = [ james ];

Replacement in hosts/kiwi/configuration.nix at line 41 [8.4566]

B:BD[8.5514] → [8.5514:5639]

		openssh.authorizedKeys.keys = [
			"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA7WV4+7uhIWQVHEN/2K0jJPTaZ/HbG3W8OKSpzmPBI4"
		];

[8.5514]

[8.5639]

		openssh.authorizedKeys.keys = [ james ];