nix-config/nixos/fuchsia
jasmine 85dc419349
refactor(ssh): decentralize SSH configuration to per-host services
Restructures SSH trust relationships from global to host-specific configuration
for better locality of concern and principle of least privilege.

Changes:
- Collapse nixos/common/global/ssh/ back to ssh.nix (single-file module)
- Move internal host trust (fuchsia/viridian) to per-host services/ssh/
- Split BorgBase known hosts by repository (li9kg944 for fuchsia, r7ag7x1w for viridian)
- Add viridian SSH server config to accept backup connections from fuchsia
- Add fuchsia borgbackup passphrase for offsite backups
- Configure viridian to create /srv/borg-repo/fuchsia for remote backups

This enables the 3-2-1 backup strategy with fuchsia backing up to both viridian
(onsite) and BorgBase (offsite) with proper SSH authentication.
2025-10-07 22:33:20 +08:00
..
services refactor(ssh): decentralize SSH configuration to per-host services 2025-10-07 22:33:20 +08:00
configuration.nix refactor 2025-06-06 18:35:13 +08:00
hardware-configuration.nix refactor 2025-09-26 18:07:05 +08:00
ssh_host_ed25519_key.pub add host pub keys 2024-01-21 21:02:53 +08:00
ssh_host_rsa_key.pub add host pub keys 2024-01-21 21:02:53 +08:00