liminix

commit 1b4106e2a3066f6647703f79ecfa385c4e822923
parent 89912c766b67863e213d8ece8b94e93bcd27bc8d
Author: Daniel Barlow <dan@telent.net>
Date:   Sun, 25 Aug 2024 15:09:31 +0100

ssh-keys service, draft

Diffstat:
M
examples/router-with-l2tp.nix
 | 
9
+++++++++

1 file changed, 9 insertions(+), 0 deletions(-)
diff --git a/examples/router-with-l2tp.nix b/examples/router-with-l2tp.nix
@@ -72,6 +72,15 @@ in rec {
     dependencies = [ services.wan-address-for-secrets ];
   };
 
+  services.ssh-keys = longrun {
+    name = "write-ssh-keys";
+    run = ''
+      mkdir -p /run/authorized_keys
+      exec ${pkgs.watch-ssh-keys}/bin/watch-ssh-keys -d /run/authorized_keys ${services.secrets} ssh/authorizedKeys
+    '';
+    dependencies = [ services.secrets ] ;
+  };
+
   services.wwan = svc.wwan.huawei-e3372.build {
     apn = "data.uk";
     username = "user";