Ingolf Wagner
7a6510a4e6
Some checks are pending
Build all NixOS Configurations / nix build (push) Waiting to run
47 lines
1 KiB
Nix
47 lines
1 KiB
Nix
{
|
|
lib,
|
|
config,
|
|
clanLib,
|
|
...
|
|
}:
|
|
with lib;
|
|
with types;
|
|
let
|
|
machines = clanLib.allMachineNames;
|
|
publicKey = clanLib.readFact "ssh.id_ed25519.pub";
|
|
tld = config.clan.static-hosts.topLevelDomain;
|
|
knownHosts = lib.genAttrs machines (machine: {
|
|
hostNames = [
|
|
"${machine}"
|
|
"${machine}.${tld}"
|
|
"${machine}.private"
|
|
];
|
|
publicKey = publicKey machine;
|
|
});
|
|
bootMachines = clanLib.readFactFromAllMachines "ssh.boot.id_ed25519.pub";
|
|
knownBootHosts = lib.mapAttrs' (
|
|
machine: publicKey:
|
|
nameValuePair "boot_${machine}" {
|
|
inherit publicKey;
|
|
hostNames = [
|
|
"[${machine}]:2222"
|
|
"[${machine}.public]:2222"
|
|
];
|
|
}
|
|
) bootMachines;
|
|
in
|
|
{
|
|
|
|
# todo : move this to the proper place
|
|
options.components.network.zerotier = {
|
|
enable = mkOption {
|
|
type = bool;
|
|
default = false; # todo : properly set this
|
|
};
|
|
};
|
|
|
|
config = mkIf config.components.network.zerotier.enable {
|
|
services.openssh.knownHosts = knownHosts // knownBootHosts;
|
|
};
|
|
}
|