From 8a8ea401019d753cdf07eac3339dad65c3d88934 Mon Sep 17 00:00:00 2001
From: matt1432 <matt@nelim.org>
Date: Tue, 16 Jan 2024 22:33:02 -0500
Subject: [PATCH] refactor(openssh): move authorizedKeys to sshd module

---
 devices/binto/default.nix   |   5 -----
 devices/oksys/default.nix   |   6 ------
 devices/servivi/default.nix |   6 ------
 flake.nix                   | Bin 8103 -> 8170 bytes
 modules/sshd.nix            |  12 +++++++++++-
 5 files changed, 11 insertions(+), 18 deletions(-)

diff --git a/devices/binto/default.nix b/devices/binto/default.nix
index 02def669..597a3fde 100644
--- a/devices/binto/default.nix
+++ b/devices/binto/default.nix
@@ -36,11 +36,6 @@ in {
       "video"
       "libvirtd"
     ];
-
-    openssh.authorizedKeys.keys = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPE39uk52+NIDLdHeoSHIEsOUUFRzj06AGn09z4TUOYm matt@OP9"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJGbLu+Gb7PiyNgNXMHemaQLnKixebx1/4cdJGna9OQp matt@wim"
-    ];
   };
   home-manager.users.${mainUser} = {
     imports = [
diff --git a/devices/oksys/default.nix b/devices/oksys/default.nix
index 60280c9d..5bd8833a 100644
--- a/devices/oksys/default.nix
+++ b/devices/oksys/default.nix
@@ -26,12 +26,6 @@ in {
       "wheel"
       "adm"
     ];
-
-    openssh.authorizedKeys.keys = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPE39uk52+NIDLdHeoSHIEsOUUFRzj06AGn09z4TUOYm matt@OP9"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICr2+CpqXNMLsjgbrYyIwTKhlVSiIYol1ghBPzLmUpKl matt@binto"
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJGbLu+Gb7PiyNgNXMHemaQLnKixebx1/4cdJGna9OQp matt@wim"
-    ];
   };
   home-manager.users.${mainUser} = {
     imports = [];
diff --git a/devices/servivi/default.nix b/devices/servivi/default.nix
index 67ebdf72..2b36a4e8 100644
--- a/devices/servivi/default.nix
+++ b/devices/servivi/default.nix
@@ -26,12 +26,6 @@ in {
         "wheel"
         "adm"
       ];
-
-      openssh.authorizedKeys.keys = [
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPE39uk52+NIDLdHeoSHIEsOUUFRzj06AGn09z4TUOYm matt@OP9"
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICr2+CpqXNMLsjgbrYyIwTKhlVSiIYol1ghBPzLmUpKl matt@binto"
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJGbLu+Gb7PiyNgNXMHemaQLnKixebx1/4cdJGna9OQp matt@wim"
-      ];
     };
 
     # https://nixos.wiki/wiki/Distributed_build
diff --git a/flake.nix b/flake.nix
index 4fdb783c1cf53ce358f83b9082c8f1b5fdfd066e..8ae0ab99295b495d698e80c6849c0c56741b3d04 100644
GIT binary patch
delta 71
zcmZ2(|H^)Ykbsq&XN0e-l|n{INkOrdzJ7XUNk(asUUGh}enx&#QD#z3YF=V)s(wag
aK~Z{9VsWv4W^r+8YO%h#*=A0GdHevQgc-vC

delta 12
TcmaE5zubO<kih0pfvNleBM=0h

diff --git a/modules/sshd.nix b/modules/sshd.nix
index f4714c5a..e0334fc2 100644
--- a/modules/sshd.nix
+++ b/modules/sshd.nix
@@ -1,4 +1,6 @@
-{...}: {
+{config, ...}: let
+  inherit (config.vars) mainUser;
+in {
   services = {
     openssh = {
       enable = true;
@@ -8,4 +10,12 @@
       };
     };
   };
+
+  users.users.${mainUser} = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPE39uk52+NIDLdHeoSHIEsOUUFRzj06AGn09z4TUOYm matt@OP9"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICr2+CpqXNMLsjgbrYyIwTKhlVSiIYol1ghBPzLmUpKl matt@binto"
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJGbLu+Gb7PiyNgNXMHemaQLnKixebx1/4cdJGna9OQp matt@wim"
+    ];
+  };
 }