mediabox: add ssh service to initrd
This commit is contained in:
@@ -30,6 +30,10 @@
|
||||
sopsFile = ../common/secrets/wg_preshared.yaml;
|
||||
};
|
||||
|
||||
sops.secrets."ssh_dummy_ed25519_key" = {
|
||||
sopsFile = ./secrets/dummy_ssh_key.yaml;
|
||||
};
|
||||
|
||||
nix = {
|
||||
optimise.automatic = true;
|
||||
gc.automatic = true;
|
||||
@@ -41,7 +45,20 @@
|
||||
};
|
||||
|
||||
boot = {
|
||||
initrd.compressor = "zstd";
|
||||
initrd = {
|
||||
compressor = "zstd";
|
||||
availableKernelModules = ["e1000e"];
|
||||
network = {
|
||||
enable = true;
|
||||
udhcpc.enable = true;
|
||||
ssh = {
|
||||
enable = true;
|
||||
hostKeys = [config.sops.secrets."ssh_dummy_ed25519_key".path];
|
||||
authorizedKeys = [(builtins.readFile ../nixy/ssh_pubkey)];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
kernelModules = ["acpi_call"];
|
||||
kernelPackages = pkgs.linuxPackages_latest;
|
||||
kernelParams = ["msr.allow_writes=on"];
|
||||
|
||||
Reference in New Issue
Block a user