git

flake.nix

@@ -12,6 +12,7 @@
 
         vicinae.url          = "github:vicinaehq/vicinae";
         ghostty.url          = "github:ghostty-org/ghostty";
+        inputs.auth-keys-hub.url = "github:input-output-hk/auth-keys-hub";
 
         quickshell = {
             url = "github:outfoxxed/quickshell";
@@ -39,6 +40,7 @@
                     inherit profile;
                 };
                 modules = [
+                    ./modules/core
                     ./profiles/${profile}.nix
                     ./hosts/${host}
                 ] ++ extraModules;

modules/core/default.nix

@@ -10,6 +10,7 @@
     ./network.nix
     ./packages.nix
     ./services.nix
+    ./ssh.nix
     ./system.nix
     ./user.nix
     ./xserver.nix

modules/core/ssh.nix

@@ -0,0 +1,16 @@
+{ inputs, pkgs, ... }:
+{
+  imports = [ inputs.auth-keys-hub.nixosModules.auth-keys-hub ];
+
+  services.openssh = {
+    enable = true;
+    openFirewall = true;
+  };
+
+  programs.auth-keys-hub = {
+    enable = true;
+    github = {
+      users = [ "moons-14:moons" ];
+    };
+  };
+}

modules/home/default.nix

@@ -3,5 +3,7 @@
   imports = [
     ./git.nix
     ./fcitx5
+    ./ssh.nix
+    ./zsh.nix
   ];
 }

modules/home/ssh.nix

@@ -0,0 +1,19 @@
+{ config, lib, ... }:
+{
+  programs.ssh.startAgent = true;
+
+  home.packages = [ pkgs.openssh ];
+
+  home.activation.generateSshKey = lib.hm.dag.entryAfter [ "writeBoundary" ] ''
+    key="$HOME/.ssh/id_ed25519"
+    if [ ! -f "$key" ]; then
+      umask 077
+      mkdir -p "$HOME/.ssh"
+      ssh-keygen -t ed25519 -N "" -f "$key" \
+        -C "${config.home.username}@$(hostnamectl --static)"
+      echo "Generated SSH key at $key"
+      echo "Public key:"
+      cat "$key.pub"
+    fi
+  '';
+}

profiles/cli-minimal.nix

@@ -1,10 +1,8 @@
 { ... }:
 {
   imports = [
-    ./../modules/core
   ];
 
   home-manager.users.moons.imports = [
-    ./../modules/home/zsh.nix
   ];
 }