move ssh key to variable for DRYness

hosts/freun.dev/configuration.nix

@@ -2,7 +2,7 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running `nixos-help`).
 
-{ config, pkgs, self, ... }:
+{ config, pkgs, ssh, ... }:
 
 {
   nix = {
@@ -107,11 +107,11 @@
     isNormalUser = true;
     extraGroups = [ "wheel" ]; # Enable ‘sudo’ for the user.
     packages = [ pkgs.nh ];
-    openssh.authorizedKeys.keys = [
-      "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLIUkESu5NnBi1M0+ZjYrkp6/rIFuwc3aguspf98jmOydNce6l65cnS3GRzc9oWx4lu11ahi87ZuE+pYV+gaHm4="
-    ];
+    openssh.authorizedKeys.keys = [ ssh.publicKeys.yubikey ];
   };
 
+  nix.settings.trusted-users = [ "jokke" ];
+
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [

hosts/freun.dev/services/snips.nix

@@ -1,13 +1,11 @@
-{ pkgs, bin, ... }:
+{ pkgs, bin, ssh, ... }:
 let
   fqdn = "bin.freun.dev";
   port = 3600;
   sshPort = bin.sshPort;
   authorizedKeys = pkgs.writeTextFile {
     name = "authorized_keys";
-    text = ''
-      ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLIUkESu5NnBi1M0+ZjYrkp6/rIFuwc3aguspf98jmOydNce6l65cnS3GRzc9oWx4lu11ahi87ZuE+pYV+gaHm4=
-    '';
+    text = ssh.publicKeys.yubikey;
   };
 in
 {