vmimages

based on https://samleathers.com/posts/2022-02-11-my-new-network-and-sops.html

Create new SSH HOST KEYS

sudo ssh-keygen -q -N "" -t rsa -b 4096 -f /etc/ssh/ssh_host_rsa_key sudo ssh-keygen -q -N "" -t ed25519 -f /etc/ssh/ssh_host_ed25519_key

Local sudo cat /etc/ssh/ssh_host_rsa_key|ssh-to-pgp -o nixos/secrets/keys/hostname ssh hostname "cat /etc/ssh/ssh_host_rsa_key"|ssh-to-pgp -o nixos/secrets/keys/hostname

TODO

swtich to ed25519 ssh-to-age? https://github.com/Mic92/ssh-to-age