me like nix
prefer yubikey ssh key for git forges
author
Sean Aye
date
(May 18, 2026, 9:51 AM -0400)
commit
9ac6309d
9ac6309d66a0eed8d1da011f09db8adf3c44d15d
parent
c60a7822
c60a78226fee1049958a00025ce805483b4ff667
change-id
qurunlyo
qurunlyoounlouyvusnsvmkpppvuptxu
+12
+12
modules/sean.nix
+12
modules/sean.nix
···
61
61
enable = true;
62
62
enableDefaultConfig = false;
63
63
matchBlocks = {
64
+
# For git/jj over SSH, try the local YubiKey-backed security key
65
+
# first. If the key is not plugged in, OpenSSH will continue on to
66
+
# identities exposed by the 1Password SSH agent.
67
+
"git-forges" = {
68
+
host = "github.com gist.github.com codeberg.org gitlab.com";
69
+
identityFile = [
70
+
"${config.home.homeDirectory}/.ssh/id_ed25519_sk_rk"
71
+
];
72
+
identityAgent = [
73
+
"${config.home.homeDirectory}/.1password/agent.sock"
74
+
];
75
+
};
64
76
"*" = {
65
77
identityFile = [
66
78
"${config.home.homeDirectory}/.ssh/id_ed25519_sk_rk"