25 lines
503 B
Nix
25 lines
503 B
Nix
{
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
cfg = config.machine.bind;
|
|
in
|
|
with lib; mkIf cfg.enable {
|
|
sops.secrets = {
|
|
"velarion/publicKey" = {
|
|
sopsFile = ./../../secrets/velarion.yaml;
|
|
path = "/etc/ssh/ssh_host_ed25519_key.pub";
|
|
mode = "0644";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
"velarion/privateKey" = {
|
|
sopsFile = ./../../secrets/velarion.yaml;
|
|
path = "/etc/ssh/ssh_host_ed25519_key";
|
|
mode = "0600";
|
|
owner = "root";
|
|
group = "root";
|
|
};
|
|
};
|
|
}
|