From a8dd32fd6a4f7f8a10df5ea4293556e45099d839 Mon Sep 17 00:00:00 2001
From: Franck Cuny <fcuny@roblox.com>
Date: Mon, 5 Jan 2026 13:31:54 -0800
Subject: use ssh key backed by yubikey

---
 home/programs/hashi.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'home/programs/hashi.nix')

diff --git a/home/programs/hashi.nix b/home/programs/hashi.nix
index 424c7b3..688bf2d 100644
--- a/home/programs/hashi.nix
+++ b/home/programs/hashi.nix
@@ -83,7 +83,7 @@ in
           builtins.concatMap (env: [
             {
               name = "ssh-sign-${env.alias}";
-              value = "${pkgs.hashi}/bin/hashi -e ${env.name} sign --output-path=${config.home.homeDirectory}/.ssh/${env.alias}-cert.pub --key=(${pkgs._1password-cli}/bin/op read 'op://employee/default rbx ssh key/public key'|psub) key";
+              value = "${pkgs.hashi}/bin/hashi -e ${env.name} sign --output-path=${config.home.homeDirectory}/.ssh/${env.alias}-cert.pub --key=${config.home.homeDirectory}/.ssh/id_ed25519_sk_rk key.pub";
             }
             {
               name = "hashi-${env.alias}";
-- 
cgit v1.2.3