Configuration for my NixOS based systems and Home Manager
ADD: fetch ssh pubkeys from meta.sr.ht
+9
-11
+9
-11
users.nix
+9
-11
users.nix
···
1
-
{ pkgs, ... }:
1
+
{ pkgs, lib, ... }:
2
2
let
3
3
home-manager = builtins.fetchTarball
4
4
"https://github.com/nix-community/home-manager/archive/release-24.11.tar.gz";
···
21
21
shell = pkgs.fish;
22
22
extraGroups = [ "wheel" "video" "nas" "nats" "litterbox" ]; # Enable ‘sudo’ for the user.
23
23
hashedPasswordFile = "/etc/nixos/noah-password";
24
-
openssh.authorizedKeys.keys = [
25
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC/cXL1cV6QUW5z2bJp1mCu0CXrcc0Dntdxaeo3fg60N noah@odin"
26
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJeSPXmzD0rXKNjR1q+qSJqXjO0gxLitTRD+m02v94p6 noah@aleister"
27
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQFlX3hhXxsqAUYLvF+IX1YWQ+k22OHlqMOjgyNBe9e noah@misaki"
28
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItPCXGjXp97M4v7H+dT/fT5B//VFe0dmXaJzIEujTXg noah@Noahs-MacBook-Air.local"
29
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGf0jjB8VP1YoUDRRPR88DTFUWKd/fzOQ5joAWH8zn8N noah@othinus"
30
-
"ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBHuQs+W/l/YDpBjd3HeWti03JXYDOLmmfiKXCd8y0g93L//fYoiJuXGMx5KNR7TZoMztGC/4yJhLRMDK2fnTu+U= noah@iphone"
31
-
"sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBFaaVbvatEya1iKcsXXifkmDNnpf9AFLKz/ifB2uPqzQfDaEmTW8vTDjDUUgMRhI3LwXi/mh5MqBqC9KLqwv4sEAAAAUaWRfZWNkc2Ffc2tAYmxpbmsuc2g= noah@bitwarden-passkey"
32
-
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP+5k7mepfWkM4BE9D44uBmVtcE8KWmAKuK+JWWKs1/+ noah@purple-ipad"
33
-
];
24
+
openssh.authorizedKeys.keys =
25
+
lib.strings.splitString "\n" (builtins.readFile (builtins.fetchurl {
26
+
url = "https://meta.sr.ht/~chiefnoah.keys";
27
+
name = "chiefnoah.keys";
28
+
# Update this with:
29
+
# `curl https://meta.sr.ht/~chiefnoah.keys | sha256sum`
30
+
sha256 = "1587d75012cdd77c2dc006b3162e816213c5bac9c8c4addf81d66c156393b1fc";
31
+
}));
34
32
};
35
33
36
34
users.groups.nas.gid = 1001;