asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

nixos: never commit the staged host key

Browse source 
An install reads the server's SSH host key from nixos/extra/, and that
key also decrypts the server's secrets. Ignore the directory, along
with nix build result links.

Assisted-by: Claude:fable-5-2
This commit is contained in:
Sergei Poljanski 2026-11-12 17:02:56 +04:00
commit b7c203814e
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nixos/.gitignore vendored Normal file
View file

@ -0,0 +1,4 @@
# Host private keys staged for an install (see README); never commit
/extra/
result
result-*