chore: remove baked SSH key from template user
Rely on cloud-init SSH key injection from secrets for access rotation instead of storing an authorized key in the template config.
This commit is contained in:
@@ -30,9 +30,6 @@
|
|||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "wheel" ];
|
extraGroups = [ "wheel" ];
|
||||||
shell = pkgs.fish;
|
shell = pkgs.fish;
|
||||||
openssh.authorizedKeys.keys = [
|
|
||||||
"REPLACE_WITH_SINGLE_LINE_PUBLIC_KEY"
|
|
||||||
];
|
|
||||||
};
|
};
|
||||||
|
|
||||||
security.sudo.wheelNeedsPassword = false;
|
security.sudo.wheelNeedsPassword = false;
|
||||||
|
|||||||
Reference in New Issue
Block a user