From 3b26e1404698491591023063afc7d94b28978dbb Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sat, 24 Jan 2026 11:03:00 -0800
Subject: ensure ssh keys for root are in the iso

---
 profiles/defaults.nix | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

(limited to 'profiles/defaults.nix')

diff --git a/profiles/defaults.nix b/profiles/defaults.nix
index 834c28d..ab11f81 100644
--- a/profiles/defaults.nix
+++ b/profiles/defaults.nix
@@ -2,7 +2,6 @@
   config,
   pkgs,
   lib,
-  adminUser,
   ...
 }:
 let
@@ -19,6 +18,7 @@ in
 {
   imports = [
     ./cgroups.nix
+    ./users/root.nix
   ];
 
   boot = {
@@ -122,15 +122,7 @@ in
   ## disable that slow "building man-cache" step
   documentation.man.generateCaches = lib.mkForce false;
 
-  users = {
-    mutableUsers = false;
-    users.root.openssh.authorizedKeys.keys = with adminUser.userinfo.sshPublicKeys; [
-      onepassword
-      yubikey-personal-nano
-      yubikey-personal-keychain
-      yubikey-personal-backup
-    ];
-  };
+  users.mutableUsers = false;
 
   security.sudo.wheelNeedsPassword = false;
 
-- 
cgit v1.2.3