Cleanup remote LUKS unlock

This commit is contained in:
2023-02-11 18:40:08 -07:00
parent 2c8576a295
commit 3e0cde40b8
9 changed files with 49 additions and 54 deletions

View File

@@ -8,6 +8,7 @@ let
# hostnames that resolve on clearnet for LUKS unlocking
unlock-clearnet-hosts = {
ponyo = "unlock.ponyo.neet.dev";
s0 = "s0";
};
# hostnames that resolve on tor for LUKS unlocking
@@ -15,6 +16,7 @@ let
liza = "5synsrjgvfzywruomjsfvfwhhlgxqhyofkzeqt2eisyijvjvebnu2xyd.onion";
router = "jxx2exuihlls2t6ncs7rvrjh2dssubjmjtclwr2ysvxtr4t7jv55xmqd.onion";
ponyo = "cfamr6artx75qvt7ho3rrbsc7mkucmv5aawebwflsfuorusayacffryd.onion";
s0 = "r3zvf7f2ppaeithzswigma46pajt3hqytmkg3rshgknbl3jbni455fqd.onion";
};
in {
networking.hosts = {
@@ -57,6 +59,10 @@ in {
hostNames = [ "s0" "s0.zt.neet.dev" ];
publicKey = system.s0;
};
s0-unlock = {
hostNames = [ unlock-onion-hosts.s0 ];
publicKey = system.s0-unlock;
};
n1 = {
hostNames = [ "n1" ];
publicKey = system.n1;