Configuration for my NixOS based systems and Home Manager
ADD: fetch SSH pubkeys from meta.sr.ht
+9
-7
+9
-7
users.nix
+9
-7
users.nix
···
1
-
{ pkgs, ... }:
1
+
{ pkgs, lib, ... }:
2
2
let
3
3
home-manager = builtins.fetchTarball
4
4
"https://github.com/nix-community/home-manager/archive/release-24.11.tar.gz";
···
22
22
shell = pkgs.fish;
23
23
extraGroups = [ "wheel" "video" "nas" "libvirtd" "qemu-libvirtd" ]; # Enable ‘sudo’ for the user.
24
24
hashedPasswordFile = "/etc/nixos/noah-password";
25
-
openssh.authorizedKeys.keys = [
26
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC/cXL1cV6QUW5z2bJp1mCu0CXrcc0Dntdxaeo3fg60N noah@odin"
27
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJeSPXmzD0rXKNjR1q+qSJqXjO0gxLitTRD+m02v94p6 noah@aleister"
28
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQFlX3hhXxsqAUYLvF+IX1YWQ+k22OHlqMOjgyNBe9e noah@misaki"
29
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMFOUuNyxdcMRmDiqQMxNZX1CFiJye5JbHIJ95fXd5dC noah@nixos-wsl"
30
-
];
25
+
openssh.authorizedKeys.keys =
26
+
lib.strings.splitString "\n" (builtins.readFile (builtins.fetchurl {
27
+
url = "https://meta.sr.ht/~chiefnoah.keys";
28
+
name = "chiefnoah.keys";
29
+
# Update this with:
30
+
# `curl https://meta.sr.ht/~chiefnoah.keys | sha256sum`
31
+
sha256 = "1587d75012cdd77c2dc006b3162e816213c5bac9c8c4addf81d66c156393b1fc";
32
+
}));
31
33
};
32
34
33
35
users.groups.nas.gid = 1001;