me like nix
allow more keys
author
Sean Aye
date
(Mar 22, 2026, 8:03 PM -0400)
commit
48c5ae99
48c5ae99e79daffadde14c3a1e21ef2130189d4c
parent
8ff86d3a
8ff86d3aae8449a3de9c937fb5f0f996d5bc7c4d
change-id
yozmtrsq
yozmtrsqwlkprwtqpsnzqtlpnnyrlmxq
+14
-2
-1
hosts/common/common.nix
-1
hosts/common/common.nix
+6
hosts/framework16/configuration.nix
+6
hosts/framework16/configuration.nix
···
22
22
# Enable QEMU emulation for aarch64 (for building Pi images)
23
23
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
24
24
25
+
# nixos-raspberrypi binary cache (pre-built Pi 5 kernel, kodi, etc.)
26
+
nix.settings.extra-substituters = [ "https://nixos-raspberrypi.cachix.org" ];
27
+
nix.settings.extra-trusted-public-keys = [ "nixos-raspberrypi.cachix.org-1:4iMO9LXa8BqhU+Rpg6LQKiGa2lsNh/j2oiYLNOQ5sPI=" ];
28
+
nix.settings.trusted-users = [ "root" "sean" ];
29
+
25
30
# Use power-profiles-daemon instead of TLP (recommended for AMD Framework)
26
31
services.power-profiles-daemon.enable = true;
27
32
···
68
73
69
74
users.users.sean.openssh.authorizedKeys.keys = [
70
75
"ssh-rsa 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"
76
+
"sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOIgEteUEW06dnBHe2z8vNLwz2iMKe8bba6JgMmOUpcBAAAABHNzaDo= sean@framework16"
71
77
];
72
78
73
79
# Open ports in the firewall.
+1
hosts/organelle/configuration.nix
+1
hosts/organelle/configuration.nix
···
54
54
extraGroups = [ "wheel" "gpio" ];
55
55
openssh.authorizedKeys.keys = [
56
56
"ssh-rsa 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"
57
+
"sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOIgEteUEW06dnBHe2z8vNLwz2iMKe8bba6JgMmOUpcBAAAABHNzaDo= sean@framework16"
57
58
];
58
59
};
59
60
+1
hosts/pi-common/default.nix
+1
hosts/pi-common/default.nix
···
147
147
extraGroups = [ "wheel" "video" ];
148
148
openssh.authorizedKeys.keys = [
149
149
"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDCIqgZ7kedxo+mOW7YG73Vp3zel3h180y3GKvHtRsXfGlpIIvRDy7pgCBQ4AGXYD4y78URQmFohYSAPqCPOPaWcU2un3XG9KvCzEsHmsbskPonitUmCiKvrKkb6oW4jCBtd7AEtBn+AiajAQFtPZ7NN2Df3AmTypvR6Irg7R+nxnfc9NTIHmGvxSDyWcbb4pguL20sctUSqGL6xGh8q/bqhdOThSimM+z9bEUNxK/5rPhwkNniMrp4pJcUrUiAh5/4DiRFG6KT+oeg+/myoz/Z1sPvAs7u/8JDQI4RshRD8Hu0oTkRBN6Hxj478q2SXbeBUZlD6IdjP3RhGpmSecoDdtWqKbpuV3eVRtQtba3KL86GBeV/bugaOdJ1Aud+1SOFJreAAuvxzMMKT+cdQZk6oOPP148DA/No+mDm/2S43lcdCXh79wA6YRAmKQ8jmZxTCtPutrvuZK1rguvvUlEoG/vhdNHh7eDa4Td07V6bjCRPUl8qk/e4M0E3pwsTlZc="
150
+
"sk-ssh-ed25519@openssh.com AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOIgEteUEW06dnBHe2z8vNLwz2iMKe8bba6JgMmOUpcBAAAABHNzaDo= sean@framework16"
150
151
];
151
152
};
152
153
+6
-1
hosts/pi-common/wifi.nix
+6
-1
hosts/pi-common/wifi.nix
···
26
26
networking.wireless = {
27
27
enable = true;
28
28
secretsFile = config.age.secrets.wifi.path;
29
-
networks."GL-MT6000-6a6".pskRaw = "ext:WIFI_PSK";
29
+
networks."GL-MT6000-6a6" = {
30
+
pskRaw = "ext:WIFI_PSK";
31
+
extraConfig = ''
32
+
freq_list=5180 5200 5220 5240 5260 5280 5300 5320 5500 5520 5540 5560 5580 5600 5620 5640 5660 5680 5700 5720 5745 5765 5785 5805 5825
33
+
'';
34
+
};
30
35
};
31
36
}