+

oluceps · Jul 2, 2024 · 477f331 · 477f331
1 parent caffae3
commit 477f331
Show file tree

Hide file tree

Showing 4 changed files with 20 additions and 11 deletions.
diff --git a/hosts/hastur/spec.nix b/hosts/hastur/spec.nix
@@ -29,6 +29,15 @@
   };
   programs.sway.enable = true;
 
+  systemd.user.services.add-ssh-keys = {
+    script = ''
+      eval `${pkgs.openssh}/bin/ssh-agent -s`
+      export SSH_ASKPASS_REQUIRE="prefer"
+      ${pkgs.openssh}/bin/ssh-add ${config.age.secrets.id.path}
+    '';
+    wantedBy = [ "default.target" ];
+  };
+
   systemd = {
     services = {
       atuin.serviceConfig.Environment = [ "RUST_LOG=debug" ];

diff --git a/hosts/kaambl/spec.nix b/hosts/kaambl/spec.nix
@@ -34,6 +34,15 @@
   programs.sway.enable = true;
   programs.gtklock.enable = true;
 
+  systemd.user.services.add-ssh-keys = {
+    script = ''
+      eval `${pkgs.openssh}/bin/ssh-agent -s`
+      export SSH_ASKPASS_REQUIRE="prefer"
+      ${pkgs.openssh}/bin/ssh-add ${config.age.secrets.id.path}
+    '';
+    wantedBy = [ "default.target" ];
+  };
+
   srv = {
     openssh.enable = true;
     fail2ban.enable = true;

diff --git a/hosts/nodens/spec.nix b/hosts/nodens/spec.nix
@@ -11,8 +11,8 @@
 
   system.stateVersion = "22.11";
 
-  users.mutableUsers = false;
-  system.etc.overlay.mutable = false;
+  users.mutableUsers = true;
+  system.etc.overlay.mutable = true;
 
   nix.gc = {
     automatic = true;

diff --git a/misc.nix b/misc.nix
@@ -24,15 +24,6 @@
 
   boot.tmp.useTmpfs = true;
 
-  systemd.user.services.add-ssh-keys = {
-    script = ''
-      eval `${pkgs.openssh}/bin/ssh-agent -s`
-      export SSH_ASKPASS_REQUIRE="prefer"
-      ${pkgs.openssh}/bin/ssh-add ${config.age.secrets.id.path}
-    '';
-    wantedBy = [ "default.target" ];
-  };
-
   virtualisation = {
     vmVariant = {
       virtualisation = {