wip more intitrd unlockers

2023-07-23 15:23:09 +03:00
parent af1f4be6a2
commit dd60e07a14
5 changed files with 11 additions and 6 deletions
--- a/hosts/hel1-a/configuration.nix
+++ b/hosts/hel1-a/configuration.nix
@@ -26,7 +26,7 @@ in {

      initrd = {
        enable = true;
-        authorizedKeys = builtins.attrValues myData.ssh_pubkeys;
+        authorizedKeys = builtins.attrValues myData.people_pubkeys;
        hostKeys = ["/etc/secrets/initrd/ssh_host_ed25519_key"];
      };
      snapshot = {
--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@@ -17,7 +17,9 @@
      ];
      sshUnlock = {
        enable = true;
-        authorizedKeys = builtins.attrValues myData.ssh_pubkeys;
+        authorizedKeys =
+          (builtins.attrValues myData.people_pubkeys)
+          ++ [myData.hosts."hel1-a.servers.jakst".publicKey];
      };
    };
  };