diff --git a/users.nix b/users.nix index ab83331..d3dc3e1 100644 --- a/users.nix +++ b/users.nix @@ -1,4 +1,4 @@ -{ pkgs, ... }: +{ pkgs, lib, ... }: let home-manager = builtins.fetchTarball "https://github.com/nix-community/home-manager/archive/release-24.11.tar.gz"; @@ -22,12 +22,14 @@ in shell = pkgs.fish; extraGroups = [ "wheel" "video" "nas" "libvirtd" "qemu-libvirtd" ]; # Enable ‘sudo’ for the user. hashedPasswordFile = "/etc/nixos/noah-password"; - openssh.authorizedKeys.keys = [ - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC/cXL1cV6QUW5z2bJp1mCu0CXrcc0Dntdxaeo3fg60N noah@odin" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJeSPXmzD0rXKNjR1q+qSJqXjO0gxLitTRD+m02v94p6 noah@aleister" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDQFlX3hhXxsqAUYLvF+IX1YWQ+k22OHlqMOjgyNBe9e noah@misaki" - "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMFOUuNyxdcMRmDiqQMxNZX1CFiJye5JbHIJ95fXd5dC noah@nixos-wsl" - ]; + openssh.authorizedKeys.keys = + lib.strings.splitString "\n" (builtins.readFile (builtins.fetchurl { + url = "https://meta.sr.ht/~chiefnoah.keys"; + name = "chiefnoah.keys"; + # Update this with: + # `curl https://meta.sr.ht/~chiefnoah.keys | sha256sum` + sha256 = "1587d75012cdd77c2dc006b3162e816213c5bac9c8c4addf81d66c156393b1fc"; + })); }; users.groups.nas.gid = 1001;