Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

updated ssh-bootstrap

Browse Source
This commit is contained in:
naturallaw77
2026-03-28 07:54:29 -05:00
parent 772a6cfebb
commit c7c4697863
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
modules/core/ssh-bootstrap.nix
View File

@@ -3,15 +3,15 @@
let let
userName = "free"; userName = "free";
keyPath = "/home/${userName}/.ssh/factory_login"; keyPath = "/home/${userName}/.ssh/factory_login";
userExists = builtins.hasAttr userName config.users.users;
in in
{ lib.mkIf userExists {
# Ensure SSH dirs exist with correct perms
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /root/.ssh 0700 root root -" "d /root/.ssh 0700 root root -"
"d /home/${userName}/.ssh 0700 ${userName} users -" "d /home/${userName}/.ssh 0700 ${userName} users -"
]; ];
# Generate keypair if missing (runs once)
systemd.services.factory-ssh-keygen = { systemd.services.factory-ssh-keygen = {
description = "Generate factory SSH key for ${userName} if missing"; description = "Generate factory SSH key for ${userName} if missing";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
@@ -30,7 +30,6 @@ in
''; '';
}; };
# Pull the public key into root's authorized_keys once it exists
systemd.services.factory-ssh-authorize = { systemd.services.factory-ssh-authorize = {
description = "Authorize factory SSH key for root"; description = "Authorize factory SSH key for root";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];