21 lines
728 B
Nix
21 lines
728 B
Nix
{ config, lib, ... }:
|
||
let
|
||
# 与 modules/core/sops.nix 保持同一开关：secrets 文件存在时才启用。
|
||
secretsEnabled = builtins.pathExists ../../secrets/users/luochen570.enc.yaml;
|
||
in
|
||
{
|
||
programs.ssh.enable = true;
|
||
# 26.05: 显式关闭默认配置生成，避免未来默认值移除警告
|
||
programs.ssh.enableDefaultConfig = false;
|
||
|
||
home.file = lib.mkIf secretsEnabled {
|
||
# ~/.ssh/id_rsa 来自 sops secret 文件。
|
||
".ssh/id_rsa".source =
|
||
config.lib.file.mkOutOfStoreSymlink "/run/secrets/users/luochen570/ssh_private_key";
|
||
|
||
# ~/.ssh/config 来自 sops secret 文件。
|
||
".ssh/config".source =
|
||
config.lib.file.mkOutOfStoreSymlink "/run/secrets/users/luochen570/ssh_config";
|
||
};
|
||
}
|