From 1b4106e2a3066f6647703f79ecfa385c4e822923 Mon Sep 17 00:00:00 2001
From: Daniel Barlow <dan@telent.net>
Date: Sun, 25 Aug 2024 15:09:31 +0100
Subject: [PATCH] ssh-keys service, draft

---
 examples/router-with-l2tp.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/examples/router-with-l2tp.nix b/examples/router-with-l2tp.nix
index 24aa72f..704efcb 100644
--- a/examples/router-with-l2tp.nix
+++ b/examples/router-with-l2tp.nix
@@ -72,6 +72,15 @@ in rec {
     dependencies = [ services.wan-address-for-secrets ];
   };
 
+  services.ssh-keys = longrun {
+    name = "write-ssh-keys";
+    run = ''
+      mkdir -p /run/authorized_keys
+      exec ${pkgs.watch-ssh-keys}/bin/watch-ssh-keys -d /run/authorized_keys ${services.secrets} ssh/authorizedKeys
+    '';
+    dependencies = [ services.secrets ] ;
+  };
+
   services.wwan = svc.wwan.huawei-e3372.build {
     apn = "data.uk";
     username = "user";