albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Test

Browse source
This commit is contained in:
iFargle 2023-11-29 19:37:23 +09:00
parent 810ca628ba
commit 9010b50d8c
1 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
nixos/hosts/framework-server/ssh-luks.nix
View file

@ -5,8 +5,19 @@
# ssh setup # ssh setup
boot.kernelParams = [ "ip=dhcp" ]; boot.kernelParams = [ "ip=dhcp" ];
# ssh setup
boot.initrd.network.enable = true;
boot.initrd.network.ssh = {
enable = true;
port = 22;
shell = "/bin/cryptsetup-askpass";
authorizedKeys = [ "ssh-rsa AAAAyourpublic-key-here...." ];
hostKeys = [ "/etc/secrets/initrd/ssh_host_rsa_key" "/etc/secrets/initrd/ssh_host_ed25519_key" ];
};
boot.initrd = { boot.initrd = {
secrets = { "/boot/ssh_host_rsa_key" = "/boot/ssh_host_rsa_key"; }; enable = true;
systemd.users.root.shell = "/bin/cryptsetup-askpass"; systemd.users.root.shell = "/bin/cryptsetup-askpass";
network.enable = true; network.enable = true;
availableKernelModules = [ "cdc_ncm" ]; availableKernelModules = [ "cdc_ncm" ];