diff --git a/hosts/apollo/boot.nix b/hosts/apollo/boot.nix index 5494345..eccccf6 100644 --- a/hosts/apollo/boot.nix +++ b/hosts/apollo/boot.nix @@ -29,19 +29,19 @@ }; network = { - enable = true; - ssh = { enable = true; - port = 2222; - hostKeys = [ "/etc/secrets/initrd/ssh_host_ed25519_key" ]; - - # Use an inline string to prepend the forced systemd command to your key - authorizedKeys = [ - ''command="${pkgs.systemd}/bin/systemd-tty-ask-password-agent --watch" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIjed9TzAaS6afEilS6CQAyz7DRJUNeLWGeboB3Ma3Rb remote-fido-unlock'' - ]; + ssh = { + enable = true; + port = 2222; + hostKeys = [ "/etc/secrets/initrd/ssh_host_ed25519_key" ]; + + # Use an inline string to prepend the forced systemd command to your key + authorizedKeys = [ + ''command="${pkgs.systemd}/bin/systemd-tty-ask-password-agent --watch" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIjed9TzAaS6afEilS6CQAyz7DRJUNeLWGeboB3Ma3Rb remote-fido-unlock'' + ]; + }; }; }; - }; systemd.services."zfs-import-nix-main" = { wants = [ "keys.mount" ];