guixsd-config

commit 06366d6dc40f3ec58f2e0d896e15489b49840d1b
parent 687f762e54407f6eaa2be2d1c61df60d4ea7aac0
Author: Vineet Kumar <git@vineetk.net>
Date:   Wed, 21 Jan 2026 14:38:21 -0500

demiurge, saklas: add ssh pubkeys for login

Diffstat:
M
epistemia/systems/demiurge.scm
 | 
5
+++++
M
epistemia/systems/saklas.scm
 | 
4
++++

2 files changed, 9 insertions(+), 0 deletions(-)
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm
@@ -1,5 +1,6 @@
 (define-module (epistemia systems demiurge)
   #:use-module (gnu)
+  #:use-module (gnu packages bash)
   #:use-module (gnu packages emacs)
   #:use-module (gnu packages golang-crypto)
   #:use-module (gnu packages linux)
@@ -140,6 +141,10 @@
 									   "search epistemia\n")))))
 					  (service openssh-service-type
 						   (openssh-configuration
+						    (permit-root-login #f)
+						    (authorized-keys
+						     `(("vin" ,(local-file "/data/ssh/id_ed25519.pub"))
+						       ("root" ,(local-file "/data/ssh/id_ed25519.pub"))))
 						    (extra-content "\
                                        ListenAddress 127.0.0.1:22
                                        ListenAddress 192.168.1.2:22
diff --git a/epistemia/systems/saklas.scm b/epistemia/systems/saklas.scm
@@ -131,6 +131,10 @@
 						   "search epistemia\n")))))
 		  (service openssh-service-type
 			   (openssh-configuration
+			    (permit-root-login #f)
+			    (authorized-keys
+			     `(("vin" ,(local-file "/data/ssh/id_ed25519.pub"))
+			       ("root" ,(local-file "/data/ssh/id_ed25519.pub"))))
 			     (extra-content "\
                                        ListenAddress 127.0.0.1:22
                                        ListenAddress 162.55.242.220:22