From 505db4048338db9a5115526054b79e20fde7b25a Mon Sep 17 00:00:00 2001
From: Alexander Kassouni <alex@kassouni.net>
Date: Fri, 25 Sep 2026 22:40:15 -0700
Subject: options, git

---
 configuration.nix | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

(limited to 'configuration.nix')

diff --git a/configuration.nix b/configuration.nix
index 8335278..dfdbb64 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -2,6 +2,8 @@
   imports = [
     ./hardware-configuration.nix
     ./minecraft.nix
+    ./options.nix
+    ./git.nix
   ];
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
@@ -12,10 +14,11 @@
 
   services.openssh = {
     enable = true;
+    authorizedKeysInHomedir = false; # trust only /etc/ssh/authorized_keys.d/%u
     settings = {
       PasswordAuthentication = false;
       PermitRootLogin = "no";
-      AllowUsers = [ "kassouni" ];
+      AllowUsers = [ "kassouni" "git" ];
       KbdInteractiveAuthentication = false;
       PubkeyAuthentication = true;
     };
@@ -24,9 +27,7 @@
   users.users.kassouni = {
     extraGroups = [ "wheel" ];
     isNormalUser = true;
-    openssh.authorizedKeys.keys = [
-      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGBmhTnNG0ym84RJzbIcDCwGmPFVaFPkSYiUtNQrrnV6"
-    ];
+    openssh.authorizedKeys.keys = config.my.adminKeys;
   };
 
   system.stateVersion = "26.05";
-- 
cgit v1.3.1