managing ssh keys

hosts/common/users.nix

@@ -15,7 +15,10 @@
     };
     root = {
       shell = pkgs.fish;
-      openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKcwF1yuWEfYGScNocEbs0AmGxyTIzGc4/IhpU587SJE" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKcwF1yuWEfYGScNocEbs0AmGxyTIzGc4/IhpU587SJE"
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1v3+q3EaruiiStWjubEJWvtejam/r41uoOpCdwJtLL"
+      ];
       hashedPassword = "!";
     };
   };

hosts/desktops/rotterdam.nix

@@ -26,6 +26,7 @@
 
   boot.kernelParams = [
     "processor.max_cstate=1" # Fixes bug where ryzen cpus freeze when in highest C state
+    "clearcpuid=514"
   ];
 
   environment.sessionVariables = rec {

secrets/keycloakpg-pass.age

@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 SP9f6A DH+OPIjNpoPzAR2lBcWK6pGxLxVOT5GYO+cv8RFiShY
-tYmZD4rjyyZ7f+AKO7F4awGhkMTaMtLy/m2GixEKoD0
--> ssh-ed25519 J6tVTA t+dbGkgho9+2EVD0e1E6wpHYX4LkoeOOckrIv3IjrhA
-Rp2W2+AzY55aFLiHuyDf2sX5aKm2lKV2b2oWBxdia3c
--> =]sa>-grease _0gk(L an-* 0=Q"|=
-sVKQXYirZvI
---- JGBE8D8b1ji7xqeoF2stjMAWR/JsIWTEPFbhCx4n+Sg
-²BK”jd)~O¥-·t§¦ìQ;¼ÅÑžØÁ™Kúá6bóBN ÑÓÉlD<6C>è÷Û=^Ó¢àܪä=YH

secrets/secrets.nix

@@ -1,6 +1,7 @@
 let
   io = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCIrKJk5zWzWEHvLMPMK8T3PyeBjsCsqzxPN+OrXfhA";
-  desktops = [ io ];
+  rotterdam = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1v3+q3EaruiiStWjubEJWvtejam/r41uoOpCdwJtLL"
+  desktops = [ io rotterdam ];
 
   alexandria = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK95QueW+jp1ZmF299Xr3XkgHJ6dL7aZVsfWxqbOKVKA";
   servers = [ alexandria ];
@@ -9,6 +10,5 @@ let
 in
 {
   "cloudflare-creds.age".publicKeys = all-hosts;
-  "keycloakpg-pass.age".publicKeys = all-hosts;
   "paperless-pass.age".publicKeys = all-hosts;
 }