ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

starting to add secrets

Browse source
This commit is contained in:
= 2024-03-12 00:26:25 -05:00
parent 62725cd02e
commit da85dd701b
4 changed files with 40 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

15
users/_common/generate_ssh_key.nix Normal file
View file

@ -0,0 +1,15 @@
{ settings, pkgs, ... }:
''
if [ ! -f $HOME/.ssh/id_ed25519 ]; then
if [ -v DRY_RUN ]; then
echo "DRY_RUN is set. Would generate SSH key for ${settings.user.username}."
else
echo "Generating SSH key for ${settings.user.username}."
mkdir -p $HOME/.ssh
chmod 700 $HOME/.ssh
${pkgs.openssh}/bin/ssh-keygen -t ed25519 -f $HOME/.ssh/id_ed25519 -N ""
fi
else
echo "SSH key already exists for ${settings.user.username}."
fi
''

5
users/_common/home.nix
View file

@ -1,9 +1,12 @@
{ settings, ylib, ... } @ args: {
{ settings, pkgs, lib, ylib, ... } @ args: {
home.stateVersion = "23.11";
programs.home-manager.enable = true;
home.username = settings.user.username;
home.homeDirectory = "/home/${settings.user.username}";
# We always want a standard ssh key-pair used for secret management, create it if not there.
home.activation.generateSshKey = lib.hm.dag.entryAfter [ "writeBoundary" ] (import ./generate_ssh_key.nix args);
imports = ylib.umport { paths = [ ./programs ]; recursive = true; };
}