tv initrd/sshd: init

1 files changed, 17 insertions, 0 deletions

diff --git a/tv/2configs/initrd/sshd.nix b/tv/2configs/initrd/sshd.nix
new file mode 100644
index 000000000..eff848074
--- /dev/null
+++ b/tv/2configs/initrd/sshd.nix
@@ -0,0 +1,17 @@
+{ config, ... }: {
+  boot.initrd.availableKernelModules = [
+    "e1000e"
+  ];
+  boot.initrd.network.enable = true;
+  boot.initrd.network.ssh = {
+    enable = true;
+    port = 11423;
+    authorizedKeys = [
+      config.krebs.users.tv.pubkey
+    ];
+    ignoreEmptyHostKeys = true;
+  };
+  boot.initrd.secrets = {
+    "/etc/ssh/ssh_host_rsa_key" = <secrets/initrd/ssh_host_rsa_key>;
+  };
+}