adding ssh keys

home-manager/users/sstent/default.nix

@@ -17,11 +17,33 @@
   sops = {
     age.sshKeyPaths = [ "/home/sstent/.ssh/id_ed25519" ];
     defaultSopsFile = "${config._secretstore}/user-secrets.yaml";
-    secrets.mrconfig = {
-     sopsFile = "${config._secretstore}/user_dotfiles/mrconfig"; # optionally define per-secret files
-     format = "binary";
-     path = "${config.home.homeDirectory}/.mrconfig";
-    # path = "${config.home.homeDirectory}/${getEnv_name}";
+    secrets = {
+      mrconfig = {
+      sopsFile = "${config._secretstore}/user_dotfiles/mrconfig"; # optionally define per-secret files
+      format = "binary";
+      path = "${config.home.homeDirectory}/.mrconfig";
+      # path = "${config.home.homeDirectory}/${getEnv_name}";
+      };
+      "ssh/id_rsa" = {
+        # owner = "${config.home.username}";
+        mode = "0600";
+        path = "${config.home.homeDirectory}/.ssh/id_rsa";
+      };
+      "ssh/id_rsa_pub" = {
+        # owner = "${config.home.username}";
+        mode = "0644";
+        path = "${config.home.homeDirectory}/.ssh/id_rsa.pub";
+      };
+      "ssh/id_rsa_git" = {
+        # owner = "${config.home.username}";
+        mode = "0600";
+        path = "${config.home.homeDirectory}/.ssh/id_rsa_git";
+      };
+      "ssh/id_rsa_git_pub" = {
+        # owner = "${config.home.username}";
+        mode = "0644";
+        path = "${config.home.homeDirectory}/.ssh/id_rsa_git.pub";
+      };
     };
   };
 
@@ -104,6 +126,13 @@ programs = {
  ssh = {
     enable = true;
     matchBlocks = {
+      "*" = {
+        identityFile = "~/.ssh/id_rsa";
+      };
+      "github.com" = {
+        user = "git";
+        identityFile = "~/.ssh/id_rsa";
+      };
       "odroid*" = {
         user = "root";
       };

secrets/user-secrets.yaml

@@ -1,4 +1,9 @@
 discogs_json: ENC[AES256_GCM,data:kfEuBbM1vrcNHXnM8jOFk1bChTlYCX1Cv3n/VH0y7twv07yCo46bc+eXDOW4i4TEX5OR+lWj2XGMNM7W3DCsklfDNRGXbvr+14eG2pKIMA7DRQd0Vc3sCT8fC49J07/fh80iU3t6MCgrBaQ=,iv:CByN4avO0cJxUhXe1UP92/Gq/EhTq9J+p4JwxqVsFrM=,tag:rBLZIeYLQiLsNMF7XvWcCQ==,type:str]
+ssh:
+    id_rsa: ENC[AES256_GCM,data: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,iv:mYVl7EzsP14EKHM8lQMmqwB+4XSahsg0IS1ZFbruN1Y=,tag:fxzxWVbxG18sQ1YEOGyLkg==,type:str]
+    id_rsa_pub: ENC[AES256_GCM,data:8B9V8KMUzvRCThkTxQ6LI7I4P6P66++8JMXHbQaRZtHOa6L8dFePDXEqmsqgQpc/ErrlH/ni9/CyRfbWRByVWPlbMni484DWx4W36WUfEi/ixQJlF5yu3WUaNXpaPs4Wy7kbrok0Rw/2FB0POqkDzzXQ9ecvPOg7ZHwMJrsSM5fir+joeRpR/2ZcEznwVx+1uNdTi7/7Tudf3VS8eCIgYHoxOrtkcJTBz+87s23piSn+C+hd8eIWHext1tsItrUg5vVu+iuYCadmqxQlLhitFXzCUeg+8BK0YFS1vXrYgYejPEmtSmq+l730XhPqb0SQWkGiXdrjs1XcQ3GcHU7Io/IxZAdwPddCWU4nBM5V4DzHGk0aBgZfyoJMaoM7gpU/B0YlMtxixoOuDMsZVjbbueY97swfLe7TyCqW+0EdjiK95xCdfcFF01O8fGxQ06bD2mAKNjwqoxTRxMhCYKZj+qNDaVxWVa8FmJr2mhMknMpwNvxkqSqjcWmGPzZllkk9c1xu,iv:THvMlp5uCggD1Y5AXDZtZxN8xFwZ1WKJfUXG88Ue8Vk=,tag:RQvwYlw9NSyo3UqA8c8HRA==,type:str]
+    id_rsa_git: ENC[AES256_GCM,data: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,iv:ZI9NRxEtd87mtuFjjMX9UHTmBVyHZaZod8x9t9D/20s=,tag:V+WTznGSHMgCHLdg9flgoA==,type:str]
+    id_rsa_git_pub: ENC[AES256_GCM,data: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,iv:PXsFqzxC6EovfAvALNeJTCtJ/T+OB1YQrcoU+yhzhaY=,tag:WwVTv0+g5cRFYo60ipKkLg==,type:str]
 hello: ENC[AES256_GCM,data:6U3OsmteD67NYqvHnrnM8XzT2mROLMya038qCiB40H+NRlFuhgYQZdxdywc1wUQh9w==,iv:Nw2Hz7wpYxalxsP0oazzKmI1coEUrYwcg7KgilDsH5w=,tag:4nh9yOpRpHI6nKm2MZzT4A==,type:str]
 example_key: ENC[AES256_GCM,data:UgxbdIQ445t3jFR9Zg==,iv:cLIsoVdUEvN/pAvRNUHkGtysPK4OASKXm2RC94VSAVU=,tag:asrAHUWn9Uu/5bRkAyi79w==,type:str]
 #ENC[AES256_GCM,data:Adg2NNOaxEzRTs9hUhW7hw==,iv:YMxfMgJ/x2cHnVYakqhIbuP20BozK3x6z/9ISBUj0Io=,tag:8uSNyItwk2O+yNIrLof55g==,type:comment]
@@ -33,8 +38,8 @@ sops:
             UXBZSFhvS0ovS1ZvbHJKWXlNRlp0RXMKmggbbiJCLGVqpkTr+f+hB6rxWN+Q/aFm
             sC/nzdX/ORUPOVn7IOrDX/To3Ub8A7leFFcHPcO5jV/Tgc3WzFLFGg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-26T14:44:35Z"
-    mac: ENC[AES256_GCM,data:Huy+Bh1dayYXerRVdlgeiyvxWnh0rb/XzUn5MUWfPznV8dnlFMRmOEALpHWvXvcjLqU9kMrNeDuVrAd2pt9PYV0F1C3bxx1Y6u46NZuOgqypZX6dbs1H5HaRETNyBA4f040v8+o5t4wxQ34IhrgJehj6cX0FvrQBRdfaTZtCx+k=,iv:oKG0FdOQj/gf4ntKcLu4cS9qMX5AjhW37N1Ay08H/Dc=,tag:2m5E0+wTNsSqOLhh7wf34g==,type:str]
+    lastmodified: "2023-03-09T14:37:25Z"
+    mac: ENC[AES256_GCM,data:l2Vqtroq/rLzp/2NZlivi83oV/vEP77ofq3+5ByVpZ3MgIMtHIE1zdaLvN0Rp4UzEpyXoQmV7n7oCwLVvvTvWrIX6RCjFayHy1DQ0R4Lyj5MRtUR+tYpcXPtV02CqooJoWtP/M03VvliOdiDyVfOxV1CGFP18+7dVB5sIBX9HKU=,iv:/qbn7T8Xe5Kzrln3hGdAspUOp+diQK9++oEBqCgoBvs=,tag:Fhf7wFVq83gH5plzxLFAMA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3