grace/dots

dotfiles/nix configs

git clone https://git.gae.moe/grace/dots

Grace Yoderbig changesc1be8e3

main
branchesidkmainvulcanwafrn-testingall refs →
530 B19 linesraw
1{
2  host,
3  principals ? host.sshPrincipals or [ ],
4  extraKeys ? [ ],
5}:
6
7let
8  allowedPrincipals = [
9    "t:human"
10    "h:${host.name}"
11  ]
12  ++ principals;
13  certificateAuthority = builtins.replaceStrings [ "\n" ] [ "" ] (builtins.readFile ./ssh-ca.pub);
14in
15[
16  "cert-authority,principals=\"${builtins.concatStringsSep "," allowedPrincipals}\" ${certificateAuthority}"
17  "sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIA6Eq2yVsZrCH8so7f3ygH0UWp6WkOxbhLNFC9QewKwoAAAABHNzaDo= grace.pink"
18]
19++ extraKeys