sshd can use outputRef for authorized_keys

This commit is contained in:
Daniel Barlow
2024-08-25 16:35:50 +01:00
parent 83ca86fe42
commit c7164a6f4a
3 changed files with 17 additions and 17 deletions

View File

@@ -72,15 +72,6 @@ in rec {
dependencies = [ services.wan-address-for-secrets ];
};
services.ssh-keys = longrun {
name = "write-ssh-keys";
run = ''
mkdir -p /run/authorized_keys
exec ${pkgs.watch-ssh-keys}/bin/watch-ssh-keys -d /run/authorized_keys ${services.secrets} ssh/authorizedKeys
'';
dependencies = [ services.secrets ] ;
};
services.wwan = svc.wwan.huawei-e3372.build {
apn = "data.uk";
username = "user";
@@ -188,9 +179,7 @@ in rec {
};
services.sshd = svc.ssh.build {
authorizedKeys = {
root = rsecrets.root.openssh.authorizedKeys.keys;
};
authorizedKeys = outputRef config.services.secrets "ssh/authorizedKeys";
};
services.lns-address = let