Update vars via generator openssh for machine test-backup

This commit is contained in:
Jörg Thalheim
2024-11-14 17:33:57 +01:00
committed by kenji
parent a4e03a85eb
commit 2a5c735c90
7 changed files with 62 additions and 2 deletions

View File

@@ -24,7 +24,6 @@
imports = [
self.clanModules.borgbackup
self.clanModules.localbackup
self.clanModules.sshd
];
clan.core.networking.targetHost = "machine";
networking.hostName = "machine";
@@ -36,6 +35,16 @@
machine.publicKey = builtins.readFile ../lib/ssh/pubkey;
};
services.openssh = {
enable = true;
hostKeys = [
{
path = "/root/.ssh/id_ed25519";
type = "ed25519";
}
];
};
users.users.root.openssh.authorizedKeys.keyFiles = [ ../lib/ssh/pubkey ];
systemd.tmpfiles.settings."vmsecrets" = {
@@ -69,6 +78,8 @@
};
};
clan.core.facts.secretStore = "vm";
# TODO: set this backend as well, once we have implemented it.
#clan.core.vars.settings.secretStore = "vm";
environment.systemPackages = [ self.packages.${pkgs.system}.clan-cli ];
environment.etc.install-closure.source = "${closureInfo}/store-paths";