ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

gpdPocket3 updates

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2024-04-25 19:22:42 -05:00
parent 57090ccde1
commit 160b567583
5 changed files with 79 additions and 94 deletions
Download patch file Download diff file Expand all files Collapse all files

33
users/_common/nix_modules/ssh-key.nix
View file

@ -1,21 +1,4 @@
{ settings, pkgs, ... }:
let
sshScript = pkgs.writeScript "ssh-key-generation" ''
#!${pkgs.stdenv.shell}
if [ ! -f /home/${settings.user.username}/.ssh/id_ed25519]; then
if [ -v DRY_RUN ]; then
echo "DRY_RUN is set. Would generate SSH key for ${settings.user.username}."
else
echo "Generating SSH key for ${settings.user.username}."
mkdir -p /home/${settings.user.username}/.ssh
chmod 700 /home/${settings.user.username}/.ssh
/run/current-system/sw/bin/ssh-keygen -t ed25519 -f /home/${settings.user.username}/.ssh/id_ed25519-N ""
fi
else
echo "SSH key already exists for ${settings.user.username}."
fi
'';
in
{
# Ensure SSH key pair generation for non-root users
systemd.services.generate_ssh_key = {
@ -24,7 +7,21 @@ in
serviceConfig = {
User = "${settings.user.username}";
Type = "oneshot";
ExecStart = sshScript;
};
script = ''
#!/run/current-system/sw/bin/bash
if [ ! -f /home/${settings.user.username}/.ssh/id_ed25519bbb ]; then
if [ -v DRY_RUN ]; then
echo "DRY_RUN is set. Would generate SSH key for ${settings.user.username}."
else
echo "Generating SSH key for ${settings.user.username}."
mkdir -p /home/${settings.user.username}/.ssh
chmod 700 /home/${settings.user.username}/.ssh
/run/current-system/sw/bin/ssh-keygen -t ed25519 -f /home/${settings.user.username}/.ssh/id_ed25519bbb -N ""
fi
else
echo "SSH key already exists for ${settings.user.username}."
fi
'';
};
}