nixos-config/components/network/sshd/known-hosts-zerotier.nix

46 lines
1 KiB
Nix
Raw Normal View History

{ lib, config, clanLib, ... }:
2024-06-26 03:00:17 +02:00
with lib;
with types;
2024-06-06 01:48:15 +02:00
let
machines = clanLib.allMachineNames;
publicKey = clanLib.readFact "ssh.id_ed25519.pub";
2024-06-06 01:48:15 +02:00
tld = config.clan.static-hosts.topLevelDomain;
knownHosts = lib.genAttrs machines
(machine:
2024-06-06 01:48:15 +02:00
{
hostNames = [
"${machine}"
"${machine}.${tld}"
"${machine}.private"
2024-06-06 01:48:15 +02:00
];
publicKey = publicKey machine;
2024-06-06 01:48:15 +02:00
}
);
bootMachines = clanLib.readFactFromAllMachines "ssh.boot.id_ed25519.pub";
knownBootHosts = lib.mapAttrs'
(machine: publicKey: nameValuePair
"boot_${machine}"
{
inherit publicKey;
hostNames = [
"[${machine}]:2222"
"[${machine}.public]:2222"
];
}
)
bootMachines;
2024-06-06 01:48:15 +02:00
in
{
2024-06-26 03:00:17 +02:00
options.components.network.zerotier = {
enable = mkOption {
type = bool;
default = false; # todo : properly set this
};
};
config = mkIf config.components.network.zerotier.enable {
services.openssh.knownHosts = knownHosts // knownBootHosts;
2024-06-26 03:00:17 +02:00
};
2024-06-06 01:48:15 +02:00
}