haumea: manage zrepl ssh key
Closes: #364
Martin Weinelt committed
Jan 7, 2025 at 03:21 UTC
ba3b0556c793a1c928cd8767afb961f3802fce40
3 files changed
+12
-2
build/haumea/zrepl.nix
+11
-2
@@ -1,6 +1,15 @@
1
-{ lib, ... }:
1
+{
2
+ config,
3
+ lib,
4
+ ...
5
+}:
6
7
{
8
+ age.secrets."zrepl-ssh-key" = {
9
+ file = ../secrets/zrepl-ssh-key.age;
10
+ mode = "0400";
11
+ };
12
+
13
programs.ssh = {
14
knownHosts = {
15
rsync-net = {
@@ -104,7 +113,7 @@
113
// {
114
name = "rsyncnet";
115
connect = {
107
- identity_file = "/root/.ssh/id_ed25519";
116
+ identity_file = config.age.secrets."zrepl-ssh-key".path;
117
type = "ssh+stdinserver";
118
host = "zh4461b.rsync.net";
119
user = "root";
build/secrets.nix
+1
@@ -15,6 +15,7 @@ let
15
rfc39-github = [ machines.pluto ];
16
rfc39-record-push = [ machines.pluto ];
17
tarball-mirror-aws-credentials = [ machines.pluto ];
18
+ zrepl-ssh-key = [ machines.haumea ];
19
};
20
in
21
builtins.listToAttrs (
build/secrets/zrepl-ssh-key.age
Binary files /dev/null and b/build/secrets/zrepl-ssh-key.age differ