From f3336037e87ec4f97c00397cc81fec5e245ea4f5 Mon Sep 17 00:00:00 2001
From: Grace Yoder <grace_yoder@outlook.com>
Date: Wed, 30 Sep 2026 17:26:38 -0400
Subject: added ssh cert stuff

---
 home/ssh.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 home/ssh.nix

(limited to 'home/ssh.nix')

diff --git a/home/ssh.nix b/home/ssh.nix
new file mode 100644
index 0000000..f0e75c7
--- /dev/null
+++ b/home/ssh.nix
@@ -0,0 +1,17 @@
+{
+  principals,
+  extraKeys ? [ ],
+}:
+
+{
+  lib,
+  ...
+}:
+
+{
+  home.file.".ssh/authorized_keys".text = ''
+    cert-authority,principals="${lib.concatStringsSep "," principals}" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEuc4HCdyEMu4uiYhlokSXmu+68hkm7j6CqVwjDkCeSj grace.pink
+    sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIA6Eq2yVsZrCH8so7f3ygH0UWp6WkOxbhLNFC9QewKwoAAAABHNzaDo= grace.pink
+    ${lib.concatStringsSep "\n" extraKeys}
+  '';
+}
-- 
cgit v1.3.1