Fix agenix-rekey: add real uConsole host key, re-encrypt secrets
- Update uConsole hostPubkey from dummy to real SSH host key - Add uConsole host key to keys.nix - Add age.rekey config to lazyworkhorse - Add SSH host key to identityPaths on both hosts - Re-encrypt builder_key.age and gortium_password.age for both hosts
This commit is contained in:
@@ -251,7 +251,9 @@
|
||||
|
||||
# Private host ssh key managed by agenix
|
||||
age = {
|
||||
identityPaths = paths.identities;
|
||||
identityPaths = paths.identities ++ [
|
||||
"/etc/ssh/ssh_host_ed25519_key"
|
||||
];
|
||||
secrets = {
|
||||
containers_env = {
|
||||
file = ../../secrets/containers.env.age;
|
||||
@@ -585,4 +587,12 @@
|
||||
];
|
||||
};
|
||||
|
||||
}
|
||||
|
||||
# agenix-rekey configuration (for builder_key re-encryption at build time)
|
||||
age.rekey = {
|
||||
masterIdentities = [
|
||||
"/home/gortium/.ssh/gortium_ssh_key"
|
||||
];
|
||||
};
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user