From 181465c3762092e27d4e342df076d101268383af Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 24 Jun 2026 22:14:42 +0000
Subject: [PATCH] chore: log legacy ssh key regeneration

---
 modules/core/ssh-bootstrap.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/core/ssh-bootstrap.nix b/modules/core/ssh-bootstrap.nix
index 91c6160..d200510 100644
--- a/modules/core/ssh-bootstrap.nix
+++ b/modules/core/ssh-bootstrap.nix
@@ -53,6 +53,7 @@ lib.mkIf userExists {
       if [ ! -f "${keyPath}" ]; then
         generate_factory_key
       elif ! ssh-keygen -y -P "$PASSPHRASE" -f "${keyPath}" >/dev/null 2>&1; then
+        echo "Existing factory SSH key does not match current passphrase; backing it up and generating a replacement."
         backup_suffix=$(date -u +%Y%m%d%H%M%S)
         backup_path="${keyPath}.bak-$backup_suffix"
         backup_index=0