xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions 1

update ssh keys

Browse source
This commit is contained in:
XenGi 2026-08-21 22:27:53 +02:00
commit 37d87ae1dc
Signed by: xengi
SSH key fingerprint: SHA256:dM+fLZGsDvyv6kunjE8bGduL24VsCFB4LEOSdmRHdG0
4 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/www/openssh.nix
View file

@ -8,8 +8,8 @@
isSystemUser = true;
group = "deploy";
openssh.authorizedKeys.keys = [
"command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM35LG+xuDaoHQ2bYD4eRc3P6Cl3JVYntoP5Gu9R+mZC deploy@www.berlin.ccc.de production"
"command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www-staging/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKjjLtnGf7w5D/ON+P2HpMZ5HA2fWp5YSQMGMuu5CjUt deploy@www.berlin.ccc.de staging"
"command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTUmrD0RMS0atfreGYjobnxBhppqo5XDEOUkLgUMWpD deploy@www.berlin.ccc.de production"
"command=\"${pkgs.rsync}/bin/rsync --server -vlogDtpre.iLsfxCIvu . /srv/http/www-staging/\",restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIenjEIMaOclgb+vg/LZf2P/eF9J1MaAHpSlYpmtKToB deploy@www.berlin.ccc.de staging"
];
};
groups.deploy = { };

BIN
secrets/id_ed25519_www-production.age Normal file
View file

Binary file not shown.

BIN
secrets/id_ed25519_www-staging.age Normal file
View file

Binary file not shown.

2
secrets/secrets.nix
View file

@ -63,6 +63,8 @@ in
_dav
];
"www-staging-htpasswd.age".publicKeys = xengi ++ [ _www ];
"id_ed25519_www-staging.age".publicKeys = xengi;
"id_ed25519_www-production.age".publicKeys = xengi;
"caldav-export-config.age".publicKeys = xengi ++ [ _www ];
"radicale_htpasswd.age".publicKeys = xengi ++ [ _dav ];
"forgejo-internal-token.age".publicKeys = xengi ++ kaythxbye ++ [ _git ];