From 0d3b0ee75c5e6d278bda70762d731e2052197655 Mon Sep 17 00:00:00 2001
From: RGBCube <git@rgbcu.be>
Date: Tue, 22 Jul 2025 17:50:23 +0300
Subject: [PATCH] hosts.pala: add ssh ids

---
 hosts/pala/default.nix |  10 ++++++++++
 hosts/pala/id-cull.age | Bin 0 -> 709 bytes
 hosts/pala/id-no.age   | Bin 0 -> 709 bytes
 hosts/pala/id.age      | Bin 0 -> 709 bytes
 secrets.nix            |   7 ++++++-
 5 files changed, 16 insertions(+), 1 deletion(-)
 create mode 100644 hosts/pala/id-cull.age
 create mode 100644 hosts/pala/id-no.age
 create mode 100644 hosts/pala/id.age

diff --git a/hosts/pala/default.nix b/hosts/pala/default.nix
index add1ba3..649527a 100644
--- a/hosts/pala/default.nix
+++ b/hosts/pala/default.nix
@@ -6,6 +6,16 @@ in {
 
   type = "desktop";
 
+  secrets.id.file      = ./id.age;
+  secrets.id-cull.file = ./id-cull.age;
+  secrets.id-no.file   = ./id-no.age;
+
+  services.openssh.extraConfig = /* sshclientconfig */ ''
+    HostKey ${config.secrets.id.path}
+    HostKey ${config.secrets.id-cull.path}
+    HostKey ${config.secrets.id-no.path}
+  '';
+
   networking.hostName = "pala";
 
   users.users.pala = {
diff --git a/hosts/pala/id-cull.age b/hosts/pala/id-cull.age
new file mode 100644
index 0000000000000000000000000000000000000000..37684bb37dc17c2d634f88fc56b6a477cf9f7971
GIT binary patch
literal 709
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4t}09l2vi8wE;S0z
zbqkI32{aG#2+DRb4E3li4)!z-%k(QVbT9U-Dsj{<^^OY64&-tzH7(6E^v`z7smixZ
z&G9YK4h+l;bab(F5BGMhNGmDx3^gy0a5N9pj>KVGRdI-;wv$_4rG9{aUa(QFtBJq2
zv!Pq1nOAACxuw2GSV3iFX=XuAQARmeWomX+aGJYYWPqbzhO2K*vYW9%W^zTMS3pE~
zcyeM`QL<xpp_6mEQAsG5uCA^^VSvATdbmNBb4iv(Sb4F2ihg=ga7lQ$yJM!GOLC>7
zPq1fNWKcmxrF$S(`txU|j!x5<lqLx{e4M%LmB7_od;Yi!WSc$O&rsvTT(M+lp-kJ`
zilFPS{(ReUBmV90;!eZ*+z4ieSjR)>8oR2LZk~9@_{89tu&IBJh?T&KLl#f}FHKnT
zvhvux$h@PLZS!BJJwMdv7jZFU$uWHml@8W6%V}@KvZZb*)uz9zGfzG0b!3b0E7J+<
z!<H`;xbuHr|Gu*ZX8UsrH;V?UH||yJ)t;AS!8x&o@w>$z^QeA(+r7GW2N$^{Z?!&q
zt!{Sb;`zynGX1wSr*2VVoq6f#qv!>R20Y$ptQY>ztk`p|?a#-3<<nTFDP~pv7oM7M
zD!(%@QR~w7MeA3-|0`&8>RjREcI%r3%IRMlw(XW@UbZi>g4Oiw@s?)2SKi&9MC7(l
z)I58$f9<~*-R&#mrrB@@rG~Y0s-6p7e0if!OoCe5jbr*3jvear>7H|alEWSTw!Ck)
z5o>!dU+6k5)fr>2F8X_S=yjd@g4%&XCj<UiF-O0*mDwv9w0+A8*4Uo8Y%*^${>vmE
qw|3@D>^AwzqO(D3wXW~<8FB`Sx8FW<z4oj1{msJAubFOV{{sN}vM)OT

literal 0
HcmV?d00001

diff --git a/hosts/pala/id-no.age b/hosts/pala/id-no.age
new file mode 100644
index 0000000000000000000000000000000000000000..33be430264da5b635037c9c7959a4cf948ee215d
GIT binary patch
literal 709
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4t}09l2vl(QE>H6b
zDDw(%%5-<hHE~Sw@h!^oj_^$n@bt(Haw^h~@(Rjx^3<<%3grqhGcPv?Gs;a(j0h{q
zcPVi6DF{gkN_94_@+i;uGII?~EpsfkG!9QI^~7OYl~<)lc&1CBb5WLyZ%LK8Sw%rg
zN>F8mziD8iS8AkTRH$J<dS;eKT9_}Fe~NQterQQ{ctN6znZKcbl%ZFUzK3_EpLw2X
zQBZJdS$27jc36_BMX@KBuCA^^mYYR*Qc<W+VL(ofcadqbpHEOgcz8vQS7ca@V^pC}
zNOq2yySa8`MoBW)BwZcfnU60OJ$b>Q>$|>e$xgm?vbhD1s*7G;bl5Hv_xJZ&KW-sO
z->ZRo?~Y&E;}p~KAx_;x>|gmVmrF<7FSjnM-Xa&ded5lO&$v|&trQIT@^1bG)4#9$
zcg<RG<XHNRjr~l1e{C+f9JP|`Ox@IK!>E_;t1ew_^L|dq;s-pYr!xIF&G~Ke)5hV!
z2c2bd7iCpg9~-i&-jcf~=pmvotHSQm9#J9ViE8$zrLSah&9qheV1Bq)vQj<3=VxT?
zlpSx}HJa|o^qsBS^ep<z@B4~9TMV{wc<Mz?5xB%8kX|q?xu9KFf%T{LyYMYcY}v}2
z?o>Q~5I5cH@WP#1zw#gXzmVoDVfuOX!uA9GzV{vG1zuWUxLnY>x8bP0&#(IekHo!S
zseg#zW1FU~z+kJlXx4;sZ<&tCyUiCpll=Vu+Aj?=mt%@yXD8$-OuN>$Ak8apb>YjO
zr(I%yS*Uv4$XUf)XmM)(RNEDr=g!>NKXc}^1+z9LNSA)gIqz}Wec!`5SzDNvgvG2|
r*#1#nnX_S;{)40G9~qp={`fbX|4^*y-FAKw`@~hJqGt7<YyJcP=e8|>

literal 0
HcmV?d00001

diff --git a/hosts/pala/id.age b/hosts/pala/id.age
new file mode 100644
index 0000000000000000000000000000000000000000..dd61a45b2c086de8ccf4413ec47ed086cf6ccfd0
GIT binary patch
literal 709
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4t}09l2vo2P3b6D@
zEe<hCwRAD}H%(7*3=J%{G)PS@cJ&Hz2?`7}sR}d;Obrck3gq&s%nu3m4K_FPGB9@W
z49yQuukwwsEX{CsPRa~0sq`r>&n~h|a`DMb&&Od~vVWjozH>xaRYpphiE*(<a8j1J
zOR9Tip}ARNW?^=?he@z@Re_;lSzaJlQc9^oMR<mPpm9~cS8iZvMR}2#VO4%`fv-_m
zaZ-qdi%CvYS(K}zk54|AuCA_vPf(VASZF{<WvGW~K%zmBmuHeuxL<i<MNy_fp`~eF
zMTSX|OGc2kQDG>T$@4dAj<f$2l<$)f*HyGvjh<(cpmo=H$@hz9a*IV;u7?&r+36w8
z;G>gKt?+U}P-NGP^?~O*{{6OLjB9hc^x#e2qRler!Xy@+jL@htHRfFTOgV)`=1rQf
z@3khD2%GlUiUSYhLT_&MYzklUaQn>W7ta#?RX_UJpF6syp6jL6_Hf3caL?(SLa&-{
zn|HdN{3Z29@_L}JgpjbrjimGg(FS=LtUB@;nH;~nH|j}0{~Ez`J>%-xKgF^MyPc(u
zd35z=iL)$qaLlbb9Dh1ZW9L^@@6Qvsrv&{MYnj|$^I`6hqw2AaKVM~+y*nFe6ng1$
z`emQVr=&EGm)&0{a_^aJMrslJ)5)QIOLzQkjhSR{<ebT}6;3nyOjo_^7qn|&aN*Yf
z8&wj+={jBaXYlV6EvFAY<jq}Oqkdr7zpYP8?u3SYe0xP`lEY<{jr^aYj+*aWec3C{
zLG+G~(zlw2k1Y=|C9qY@+hxghch3ydQ*R3%Ss%W4PTflH#=48!r}1BQbKY{nWNPj#
p7f;5`vi*rw%XszpSG;5VdVKHO=C>2K1TM-|IKA4Z`hMDyGXPazD`o%y

literal 0
HcmV?d00001

diff --git a/secrets.nix b/secrets.nix
index e013ff2..1a8a8a2 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -1,5 +1,5 @@
 let
-  inherit (import ./keys.nix) best disk nine admins all;
+  inherit (import ./keys.nix) admins all best disk nine pala;
 in {
   # best
   "hosts/best/id.age".publicKeys            = [ best ] ++ admins;
@@ -33,6 +33,11 @@ in {
 
   "hosts/nine/github2forgejo/environment.age".publicKeys = [ nine ] ++ admins;
 
+  # pala
+  "hosts/pala/id.age".publicKeys      = [ pala ] ++ admins;
+  "hosts/pala/id-cull.age".publicKeys = [ pala ] ++ admins;
+  "hosts/pala/id-no.age".publicKeys   = [ pala ] ++ admins;
+
   # shared
   "modules/common/ssh/config.age".publicKeys     = all;
   "modules/linux/restic/password.age".publicKeys = all;