From f9adf3af97b7f4be5dcd314fa45138fc59cc1b7f Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Tue, 5 Sep 2023 11:30:39 +0200
Subject: tv initrd/sshd: init

---
 tv/2configs/initrd/sshd.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 tv/2configs/initrd/sshd.nix

(limited to 'tv')

diff --git a/tv/2configs/initrd/sshd.nix b/tv/2configs/initrd/sshd.nix
new file mode 100644
index 00000000..eff84807
--- /dev/null
+++ b/tv/2configs/initrd/sshd.nix
@@ -0,0 +1,17 @@
+{ config, ... }: {
+  boot.initrd.availableKernelModules = [
+    "e1000e"
+  ];
+  boot.initrd.network.enable = true;
+  boot.initrd.network.ssh = {
+    enable = true;
+    port = 11423;
+    authorizedKeys = [
+      config.krebs.users.tv.pubkey
+    ];
+    ignoreEmptyHostKeys = true;
+  };
+  boot.initrd.secrets = {
+    "/etc/ssh/ssh_host_rsa_key" = <secrets/initrd/ssh_host_rsa_key>;
+  };
+}
-- 
cgit v1.2.3