ssh8022: split client and server

hosts/fwminex/configuration.nix

@@ -13,6 +13,12 @@ in
     ../../modules/profiles/btrfs
   ];
 
+  age.secrets.ssh8022-server = {
+    file = ../../secrets/ssh8022.age;
+    owner = "spiped";
+    path = "/var/lib/spiped/ssh8022.key";
+  };
+
   boot = {
     kernelModules = [ "kvm-intel" ];
     loader.systemd-boot.enable = true;
@@ -364,10 +370,13 @@ in
 
     services = {
       sshguard.enable = true;
-      ssh8022.enable = true;
       gitea.enable = true;
       hass.enable = true;
       syncthing-relay.enable = true;
+      ssh8022.server = {
+        enable = true;
+        keyfile = config.age.secrets.ssh8022-server.path;
+      };
 
       vaultwarden = {
         enable = true;

hosts/mtworx/configuration.nix

@@ -16,6 +16,11 @@ in
     ../../modules/profiles/btrfs
   ];
 
+  age.secrets.ssh8022-client = {
+    file = ../../secrets/ssh8022.age;
+    owner = "motiejus";
+  };
+
   boot = {
     kernelModules = [ "kvm-intel" ];
     loader.systemd-boot.enable = true;
@@ -81,7 +86,11 @@ in
 
     services = {
       sshguard.enable = false;
-      ssh8022.enable = true;
+      ssh8022.client = {
+        enable = true;
+        keyfile = config.age.secrets.ssh8022-client.path;
+
+      };
 
       tailscale = {
         enable = true;