feat(nixos/alpha): use FHS dir for ssh

2 files changed, 7 insertions, 10 deletions

diff --git a/nixos/alpha/configuration.nix b/nixos/alpha/configuration.nix
index 8e366e2..b549885 100644
--- a/nixos/alpha/configuration.nix
+++ b/nixos/alpha/configuration.nix
@@ -113,16 +113,9 @@
 
   services.openssh.enable = true;
   services.openssh.settings.passwordAuthentication = false;
-  services.openssh.hostKeys = [
-    {
-      path = "/persist/ssh/ssh_host_ed25519_key";
-      type = "ed25519";
-    }
-    {
-      path = "/persist/ssh/ssh_host_rsa_key";
-      type = "rsa";
-      bits = 4096;
-    }
+
+  environment.persistence."/persist".directories = [
+    "/etc/ssh"
   ];
 
   sound.enable = false;
diff --git a/nixos/default.nix b/nixos/default.nix
index f894772..33bf06d 100644
--- a/nixos/default.nix
+++ b/nixos/default.nix
@@ -9,6 +9,7 @@
       ./modules/security.nix
       ./modules/cachix
       inputs.sops-nix.nixosModules.sops
+      inputs.impermanence.nixosModules.impermanence
     ];
   };
 
@@ -26,5 +27,8 @@
     name = "kompakt";
     system = "aarch64-linux";
     nixpkgs = unstable-small;
+    extraModules = [
+      inputs.sops-nix.nixosModules.sops
+    ];
   };
 }