modified home ssh to be user specific

flake.lock

@@ -228,11 +228,11 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1716469326,
+        "lastModified": 1716659471,
-        "narHash": "sha256-Y/oaOb0bR3VECHznlAh16DpTqDy54Ldhvupu9AOqF6E=",
+        "narHash": "sha256-Wh43usJoW7JQnO1ZnPgg4ivHCXzGkMd2KswV9MeniUo=",
         "ref": "refs/heads/master",
-        "rev": "be937cfd892ca1a027982f2a94f6b035623353c7",
+        "rev": "72490bd6af1c40712577bf2d5f96927bd557a6a7",
-        "revCount": 33,
+        "revCount": 34,
         "type": "git",
         "url": "ssh://git@git.bitlab21.com/sam/nix-secrets.git"
       },

home/common/core/default.nix

@@ -2,6 +2,5 @@
 {
   imports = [
     ./zsh.nix
-    ./ssh.nix
   ] ;
 }

home/common/core/ssh.nix

@@ -1,13 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  programs.ssh = {
-    enable = true;
-    matchBlocks = {
-      "git.bitlab21.com" = {
-       identitiesOnly = true;
-       identityFile = "~/.ssh/deploy_key-ssh-ed25519";
-      };
-    };
-  };
-}

home/users/media/default.nix

@@ -9,9 +9,19 @@
     inputs.impermanence.nixosModules.home-manager.impermanence
   ] ++ (builtins.attrValues outputs.homeManagerModules); # import all homeManagerModules?
 
+  programs.ssh = {
+    enable = true;
+    matchBlocks = {
+      "git.bitlab21.com" = {
+       identitiesOnly = true;
+       identityFile = [ "~/.ssh/deploy_key-ssh-ed25519"  ];
+      };
+    };
+  };
+
  xdg.userDirs = {
     enable = true;
-    createDirectories = false;
+    createDirectories = true;
     desktop = "/home/media/Desktop";
     documents = null;
     download = "/home/media/Downloads";

home/users/sam/default.nix

@@ -21,6 +21,16 @@
     ".icons/bibata".source = "${pkgs.bibata-cursors}/share/icons/Bibata-Modern-Classic";
   };
 
+  programs.ssh = {
+    enable = true;
+    matchBlocks = {
+      "git.bitlab21.com" = {
+       identitiesOnly = true;
+       identityFile = [ "~/.ssh/id_ed25519"];
+      };
+    };
+  };
+
   home.sessionPath = [
   ];
 

hosts/common/users/media/default.nix

@@ -44,21 +44,21 @@ in
     };
   };
 
-  sops.secrets."passwords/${username}" = {
+  sops.secrets = {
-    sopsFile = "${secretsFile}";
+    "passwords/${username}" = {
-    neededForUsers = true;
+      sopsFile = "${secretsFile}";
-  };
+      neededForUsers = true;
-
+    };
-  sops.secrets."ssh_keys/${username}/id_ed25519" = {
+    "ssh_keys/${username}/id_ed25519" = {
-    path = "/home/${username}/.ssh/id_ed25519";
+      path = "/home/${username}/.ssh/id_ed25519";
-    mode = "0600";
+      mode = "0600";
-    owner = "${username}";
+      owner = "${username}";
-  };
+      };
-
+    "ssh_keys/${username}/id_ed25519.pub" = {
-  sops.secrets."ssh_keys/${username}/id_ed25519.pub" = {
+      path = "/home/${username}/.ssh/id_ed25519.pub";
-    path = "/home/${username}/.ssh/id_ed25519.pub";
+      mode = "0644";
-    mode = "0644";
+      owner = "${username}";
-    owner = "${username}";
+    };
   };
 
   services.flatpak.enable = true;

hosts/common/users/sam/default.nix

@@ -23,9 +23,21 @@ in
 
   };
 
-  sops.secrets."passwords/${username}" = {
+  sops.secrets = {
-    sopsFile = "${secretsFile}";
+    "passwords/${username}" = {
-    neededForUsers = true;
+      sopsFile = "${secretsFile}";
+      neededForUsers = true;
+    };
+    "ssh_keys/${username}/id_ed25519" = {
+      path = "/home/${username}/.ssh/id_ed25519";
+      mode = "0600";
+      owner = "${username}";
+      };
+    "ssh_keys/${username}/id_ed25519.pub" = {
+      path = "/home/${username}/.ssh/id_ed25519.pub";
+      mode = "0644";
+      owner = "${username}";
+    };
   };
 
   programs.zsh.enable = true;