qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

all: add breakglass ssh key

Browse Source
This commit is contained in:
Aaron Bieber 2023-05-30 11:16:56 -06:00
parent 8fbe1f2ab7
commit 1ceaf24133
No known key found for this signature in database
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
default.nix
View File

@ -8,6 +8,8 @@ let
name = "ssh-ca-pubkeys";
text = caPubKeys;
};
breakGlassKey =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA6CO4aa8ymIgPgHRMwVLPnkUXwFQRKJa66R3wGXrAS0 BreakGlass";
managementKey =
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDM2k2C6Ufx5RNf4qWA9BdQHJfAkskOaqEWf8yjpySwH Nix Manager";
statusKey = ''
@ -36,7 +38,7 @@ in {
options.myconf = {
managementPubKeys = lib.mkOption rec {
type = lib.types.listOf lib.types.str;
default = [ managementKey statusKey ];
default = [ managementKey statusKey breakGlassKey ];
example = default;
description = "List of management public keys to use";
};