fix

README.md

@@ -35,6 +35,9 @@ NixOS + Home Manager
 
 ## Declarative Defeat
 Necessary configurations not achievable with dotfiles
+### Profile: cli-minimal
+- SSH key registration
+  Please register the value of ~/.ssh/id_ed25519.pub on GitHub.
 ### Profile: laptop
 - Fingerprint registration
   Please register the user's fingerprints by running fprintd-enroll.

modules/core/ssh.nix

@@ -1,24 +1,22 @@
 { inputs, pkgs, ... }:
 {
-  imports = [ inputs.auth-keys-hub.nixosModules.auth-keys-hub ];
+  imports = [
-
+    inputs.auth-keys-hub.nixosModules.auth-keys-hub
-  programs.ssh.startAgent = true;
+  ];
 
   services.openssh = {
     enable = true;
     openFirewall = true;
     settings = {
-      PermitRootLogin = "no"; # Prevent root from SSH login
+      PermitRootLogin = "no";
       PasswordAuthentication = false;
-      KbdInteractiveAuthentication = true;
+      KbdInteractiveAuthentication = false;
+      PubkeyAuthentication = "yes";
     };
-    ports = [ 22 ];
   };
 
   programs.auth-keys-hub = {
     enable = true;
-    github = {
+    github.users = [ "moons-14:${username}" ];
-      users = [ "moons-14:moons" ];
-    };
   };
 }

modules/home/ssh.nix

@@ -3,25 +3,37 @@
 
   home.packages = [ pkgs.openssh ];
 
+  programs.ssh.startAgent = true;
+
   home.activation.generateSshKey = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
     key="$HOME/.ssh/id_ed25519"
     if [ ! -f "$key" ]; then
       umask 077
       mkdir -p "$HOME/.ssh"
-      ssh-keygen -t ed25519 -N "" -f "$key" \
+      ssh-keygen -t ed25519 -N "" -f "$key" -C "${config.home.username}@$(hostnamectl --static 2>/dev/null || echo host)"
-        -C "${config.home.username}@$(hostnamectl --static)"
       echo "Generated SSH key at $key"
-      echo "Public key:"
-      cat "$key.pub"
     fi
   '';
 
-  services.ssh-agent.enable = true;
+  home.file.".ssh/config".text = ''
-  programs.gpg.enable = true;
+    Host *
+      AddKeysToAgent yes
+      IdentityFile ~/.ssh/id_ed25519
+  '';
 
-
+  programs.git = {
-  services.gpg-agent = {
     enable = true;
-    enableSshSupport = true;
+
+    signing = {
+      gpgFormat = "ssh";
+      key = "~/.ssh/id_ed25519.pub";
+      signByDefault = true;
+    };
+
+    extraConfig = {
+      gpg.format = "ssh";
+      commit.gpgsign = true;
+      tag.gpgSign = true;
+    };
   };
 }