[SSH] Add documentation
This commit is contained in:
		
							parent
							
								
									c376b8630e
								
							
						
					
					
						commit
						25e08f5e2d
					
				
					 1 changed files with 41 additions and 0 deletions
				
			
		
							
								
								
									
										41
									
								
								nixos/modules/utils/ssh/README.md
									
										
									
									
									
										Normal file
									
								
							
							
						
						
									
										41
									
								
								nixos/modules/utils/ssh/README.md
									
										
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,41 @@ | ||||||
|  | # Adding SSH keys | ||||||
|  | 
 | ||||||
|  | To incorporate SSH keys, for instance, to enable authentication with a Git server, follow these steps: | ||||||
|  | 
 | ||||||
|  | Step 0: If necessary, generate a keypair, for example using the command: | ||||||
|  | 
 | ||||||
|  | ```bash | ||||||
|  | ssh-keygen -t ed25519 | ||||||
|  | ``` | ||||||
|  | 
 | ||||||
|  | Please note that setting a password for the keypair is not yet tested. | ||||||
|  | 
 | ||||||
|  | Step 1: Create a new file named `yourservice.yaml` within the [secrets](../../../secrets/) directory by executing the following command: | ||||||
|  | 
 | ||||||
|  | ```bash | ||||||
|  | sops secrets/yourservice.yaml | ||||||
|  | ``` | ||||||
|  | 
 | ||||||
|  | Within this file, create a value that contains your private key. For example: | ||||||
|  | 
 | ||||||
|  | ```yaml | ||||||
|  | yourservice: | ||||||
|  |     ssh: | | ||||||
|  |         -----BEGIN OPENSSH PRIVATE KEY----- | ||||||
|  |         <...> | ||||||
|  |         -----END OPENSSH PRIVATE KEY----- | ||||||
|  | ``` | ||||||
|  | 
 | ||||||
|  | Step 2: Reference this value in [your sops configuration](../../utils/sops/default.nix) as follows: | ||||||
|  | 
 | ||||||
|  | ``` | ||||||
|  | sops.secrets."yourservice/ssh".format = "yaml"; | ||||||
|  | sops.secrets."yourservice/sss".sopsFile = secrets/youservice.yaml; | ||||||
|  | ``` | ||||||
|  | 
 | ||||||
|  | Step 3: Finally, add the SSH key to your SSH configuration so that it is used correctly when connecting to your host. Add the following lines to your SSH configuraton file: | ||||||
|  | 
 | ||||||
|  | ``` | ||||||
|  | Host yourservice | ||||||
|  |     IdentityFile /run/secrets/yourservice/ssh | ||||||
|  | ``` | ||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue