From b3521d6c029e11d3402d19a3e6da667764d5d5a6 Mon Sep 17 00:00:00 2001
From: MichaelFisher1997 <contact@michaelfisher.tech>
Date: Sat, 28 Feb 2026 12:45:04 +0000
Subject: [PATCH] chore: remove baked SSH key from template user

Rely on cloud-init SSH key injection from secrets for access rotation instead of storing an authorized key in the template config.
---
 nixos/template-base/configuration.nix | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/nixos/template-base/configuration.nix b/nixos/template-base/configuration.nix
index d80c1a1..9b3d133 100644
--- a/nixos/template-base/configuration.nix
+++ b/nixos/template-base/configuration.nix
@@ -30,9 +30,6 @@
     isNormalUser = true;
     extraGroups = [ "wheel" ];
     shell = pkgs.fish;
-    openssh.authorizedKeys.keys = [
-      "REPLACE_WITH_SINGLE_LINE_PUBLIC_KEY"
-    ];
   };
 
   security.sudo.wheelNeedsPassword = false;