forked from
lass.pds.lassul.us/superconfig
This repository has no description
machines yellow: add secret generator for container key
author
lassulus
date
(Mar 19, 2024, 9:54 AM CET)
commit
0e1efb41
0e1efb41c3c3333078bffb7bb18b6d0e01dcebc2
parent
a7d60aef
a7d60aef183f1de07b2a431ab841b706f3135295
+10
-1
+10
-1
machines/yellow/config.nix
+10
-1
machines/yellow/config.nix
···
12
12
13
13
krebs.sync-containers3.inContainer = {
14
14
enable = true;
15
-
pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN737BAP36KiZO97mPKTIUGJUcr97ps8zjfFag6cUiYL";
15
+
pubkey = builtins.readFile ./facts/yellow.sync.pub;
16
16
};
17
17
18
18
networking.useHostResolvConf = false;
···
75
75
IOSchedulingClass = "idle";
76
76
IOSchedulingPriority = 7;
77
77
};
78
+
};
79
+
clanCore.secrets.yellow-container = {
80
+
secrets."yellow.sync.key" = { };
81
+
facts."yellow.sync.pub" = { };
82
+
generator.path = with pkgs; [ coreutils openssh ];
83
+
generator.script = ''
84
+
ssh-keygen -t ed25519 -N "" -f "$secrets"/yellow.sync.key
85
+
mv "$secrets"/yellow.sync.key "$facts"/yellow.sync.pub
86
+
'';
78
87
};
79
88
}