nix-configs/bin/import-server-gpg-pubkeys
2025-09-07 00:11:16 +02:00

10 lines
360 B
Bash
Executable file

#!/usr/bin/env bash
set -euo pipefail
HOSTNAMES=$(nix eval .#nixosConfigurations.ds9._module.specialArgs.instanceConfigs --json | jq '.[].publicHostname | select(.)' -r)
for h in $HOSTNAMES; do
echo "[+] importing key from $h"
ssh -t $h "sudo nix-shell -p ssh-to-pgp --run \"ssh-to-pgp -i /etc/ssh/ssh_host_rsa_key -email root@$h\"" | gpg --import
done