Skip to content

Commit bae1d5e

Browse files
committed
feat: move host secrets to non-user location
Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com>
1 parent 9f00817 commit bae1d5e

2 files changed

Lines changed: 3 additions & 2 deletions

File tree

Config/config.nix

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ rec {
3939
deployment tools like cachix-deploy, colmena, etc.
4040
*/
4141
encryption = {
42-
pkeyfile = "${flake.dir.config}/SSH/Encryption/Encryption";
42+
pkeyfile = "/etc/ssh/Lenovo-Encryption";
4343
key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN618WSaf14crbHvqgDdhAqkgjz6tmyjKwL00viq5CQd wickedwizard@lenovo-laptop";
4444
};
4545
};
@@ -61,7 +61,7 @@ rec {
6161
hp-laptop = {
6262
secrets = {
6363
encryption = {
64-
pkeyfile = "${flake.dir.config}/SSH/Encryption/HP-Encryption";
64+
pkeyfile = "/etc/ssh/HP-Encryption";
6565
key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO9rLYwb+3DofPSPGlif3FvrIb2V/ujfn3u7d/YmfU7s";
6666
};
6767
};

System/Common/Misc/impermanence.nix

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@
1616
"/var/lib/sbctl"
1717
"/var/lib/upower"
1818
"/var/lib/fprint"
19+
"/etc/ssh"
1920
];
2021
files = [
2122
"/etc/machine-id"

0 commit comments

Comments
 (0)