feat(wpcarro/ssh): Give nathan access to ava r/3957

Strange commit title, but true. Make sure nathan (my MBP) can SSH into ava (my
NixOS box at work).

Change-Id: Iaf79cdd1b8633a091c706c7cb84522e2023585c0
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5455
Tested-by: BuildkiteCI
Reviewed-by: wpcarro <wpcarro@gmail.com>
Autosubmit: wpcarro <wpcarro@gmail.com>

1 files changed, 8 insertions, 0 deletions

diff --git a/users/wpcarro/nixos/ava/default.nix b/users/wpcarro/nixos/ava/default.nix
index a3454af8c6..66ee029e39 100644
--- a/users/wpcarro/nixos/ava/default.nix
+++ b/users/wpcarro/nixos/ava/default.nix
@@ -36,6 +36,8 @@ in
   };
 
   services = wpcarro.common.services // {
+    openssh.enable = true;
+
     xserver = {
       enable = true;
       layout = "us";
@@ -57,6 +59,9 @@ in
   hardware.pulseaudio.enable = true;
 
   users.mutableUsers = true;
+  users.users.root.openssh.authorizedKeys.keys = [
+    wpcarro.keys.nathan
+  ];
   users.users.wpcarro = {
     isNormalUser = true;
     extraGroups = [
@@ -65,6 +70,9 @@ in
       "docker"
     ];
     shell = pkgs.fish;
+    openssh.authorizedKeys.keys = [
+      wpcarro.keys.nathan
+    ];
   };
 
   security.sudo.wheelNeedsPassword = false;