4 ms·
Luckily for my team at least, we're using NixOS for everything so the `authorized_keys` are part of the system's configuration, which is all defined in code. Th
by yakshaving_jgt 6y ago
Luckily for my team at least, we're using NixOS for everything so the `authorized_keys` are part of the system's configuration, which is all defined in code. This means we don't have the problem of any machine's configuration going out of sync with the rest.
- ryukafalz 6y agoIs the updated system configuration applied on all machines automatically? I haven’t used Nix personally but I’ve used Guix - I want to go further with it and I’m curious how you’re managing this.
- yakshaving_jgt 6y agoYes. We're using NixOps which does this by default, though of course it can be configured otherwise.
- neolog 6y agoWhat happens if a user manually places an ssh key in ~/.ssh/ ? Do you have a way to automatically remove those?
- GekkePrutser 6y agoYou can just modify the sshd_config not to look at the user authorized keys file
- mpaepper 6y agoWhat about having different access roles for certain people to certain servers? Is that covered in the NixOS approach as well? Sounds interesting!