From ce0066436d14efbc8a3592f504efcb409f14333b Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Mon, 12 Jan 2026 08:20:05 -0800
Subject: simplify ssh key management

---
 profiles/git-server.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

(limited to 'profiles/git-server.nix')

diff --git a/profiles/git-server.nix b/profiles/git-server.nix
index 504027a..d162a8e 100644
--- a/profiles/git-server.nix
+++ b/profiles/git-server.nix
@@ -1,4 +1,9 @@
-{ pkgs, lib, ... }:
+{
+  pkgs,
+  lib,
+  adminUser,
+  ...
+}:
 let
   cgit-org2html = pkgs.writeShellScriptBin "org2html" ''
     ${pkgs.pandoc}/bin/pandoc \
@@ -27,7 +32,7 @@ in
 {
   services.gitolite = {
     enable = true;
-    adminPubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBkozy+X96u5ciX766bJ/AyQ3xm1tXZTIr5+4PVFZFi";
+    adminPubkey = adminUser.userinfo.sshPublicKeys."yubikey-personal-nano";
     user = "git";
     group = "git";
     extraGitoliteRc = ''
-- 
cgit v1.2.3