nix/part/Secret.nix

39 lines
1.2 KiB
Nix
Raw Normal View History

{ ... }: {
2024-05-12 04:22:57 +03:00
# Password used for root user.
2024-06-23 04:55:57 +03:00
hashedPassword = "$y$j9T$oqCB16i5E2t1t/HAWaFd5.$tTaHtAcifXaDVpTcRv.yH2/eWKxKE9xM8KcqXHfHrD7"; # Use `mkpasswd -s`.
2024-04-14 06:44:00 +03:00
ssh = {
2024-05-12 04:22:57 +03:00
# Keys that are allowed to connect via SSH.
2024-04-14 06:44:00 +03:00
trustedKeys = [
2024-05-25 23:20:52 +03:00
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJTI4IUkHH0JSzWDKOAMbzEDbyBXOrmTHRy+tpqJ8twx nix-on-droid@nothing2"
2024-04-14 06:44:00 +03:00
(builtins.readFile ./secret/public/Ssh.key)
];
2024-05-12 04:22:57 +03:00
# Keys that are allowd to connect via SSH to nixbuild user for Nix remote builds.
2024-04-14 06:44:00 +03:00
builderKeys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEuuw5ek5wGB9KdBhCTxjV+CBpPU6RIOynHkFYC4dau3 root@dasha"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGIf192IxsksM6u8UY+eqpHopebgV+NNq2G03ssdXIgz root@desktop"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJSWdbkYsRiDlKu8iT/k+JN4KY08iX9qh4VyqxlpEZcE root@home"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFgiYKFkMfiGOZCZIk+O7LtaoF6A3cHEFCqaPwXOM4rR root@work"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBA+KKCkFOshUznJlXW/LDie0vZLd4b+KWodSm8N8vM+ root@laptop"
];
};
2024-04-09 14:26:36 +03:00
crypto = {
2024-05-12 04:22:57 +03:00
# Git commit signing.
sign.git = {
format = "ssh";
key = ./secret/public/Ssh.key;
allowed = ./secret/public/Signers.key;
2024-04-09 14:26:36 +03:00
};
2024-05-12 04:22:57 +03:00
# List of accepted public keys.
2024-04-09 14:26:36 +03:00
publicKeys = [
2024-04-14 08:32:29 +03:00
{
source = ./secret/public/Gpg.key;
trust = 5;
}
2024-04-09 14:26:36 +03:00
];
};
}