nix-community infrastructure [maintainer=@zowoq]
f333f4e99d
It turns out that when using PIV rather than OpenPGP for SSH (`yubikey-agent` in this case), you cannot change the touch policy for enrolled keys[1]. However, it turns out that the default (`always` - touching the key for each SSH auth) is pretty annoying when running remote builds or making SSH signatures, so I had no choice but to rotate the keys once again. It's not urgent at all to get this key deployed, I'm only filing this patch now to check every box on my "SSH rotation checklist" so I don't forget about it. Happy holidays 🎉 Finally, sorry for the additional noise! [1] https://docs.yubico.com/yesdk/users-manual/application-piv/pin-touch-policies.html#touch-policies |
||
|---|---|---|
| .github | ||
| dev | ||
| devdoc | ||
| docs | ||
| hosts | ||
| modules | ||
| terraform | ||
| users | ||
| .envrc | ||
| .gitignore | ||
| .sops.yaml | ||
| config.yaml | ||
| flake.lock | ||
| flake.nix | ||
| inv | ||
| LICENSE | ||
| mkdocs.yml | ||
| pyproject.toml | ||
| README.md | ||
| secrets.yaml | ||
| tasks.py | ||
nix-community infrastructure
Welcome to the Nix Community infrastructure project. This project holds all the NixOS and Terraform configuration for this organization.
You're probably looking for our website https://nix-community.org. If you are trying to get in touch with the admins of nix-community, checkout https://nix-community.org/contact/
See devdoc for details about deployment, hardware and onboarding admins.