declare github authentication key

1 files changed, 26 insertions, 0 deletions

diff --git a/modules/terminal/nixos/github_ssh.nix b/modules/terminal/nixos/github_ssh.nix
new file mode 100644
index 0000000..0d30b64
--- /dev/null
+++ b/modules/terminal/nixos/github_ssh.nix
@@ -0,0 +1,26 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.terminal.programs.git;
+in
+  lib.mkIf cfg.installKey {
+    collinux.secrets = {
+      "github-ssh-key" = {
+        file = ./github-ssh-key.age;
+        owner = config.collinux.user.name;
+      };
+    };
+
+    programs.ssh = {
+      knownHosts."github.com".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl";
+
+      extraConfig = ''
+        Host github.com
+          User git
+          IdentityFile ${config.collinux.secrets."github-ssh-key".path}
+          IdentitiesOnly yes
+      '';
+    };
+  }