From 6f64abc64c5835d3a9a13a1769cdd740289425c2 Mon Sep 17 00:00:00 2001
From: Timo Bingmann <tbgit@panthema.net>
Date: Tue, 17 Feb 2026 09:32:28 -0800
Subject: [PATCH] set up new ed25519 ssh keys

---
 home/private/ssh-hosts.nix             | 3 +--
 system/default/ssh-authorized-keys.nix | 2 +-
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/home/private/ssh-hosts.nix b/home/private/ssh-hosts.nix
index bfac481..e4022eb 100644
--- a/home/private/ssh-hosts.nix
+++ b/home/private/ssh-hosts.nix
@@ -6,8 +6,7 @@
     enableDefaultConfig = false;
 
     matchBlocks = let
-      tb1 = "~/.ssh/id_rsa.tb1.pub";
-      tb2 = "~/.ssh/id_rsa.tb2.pub";
+      tb1 = "~/.ssh/id_ed25519.tb1";
     in
       {
         # Defaults
diff --git a/system/default/ssh-authorized-keys.nix b/system/default/ssh-authorized-keys.nix
index 9e3787b..3b1e288 100644
--- a/system/default/ssh-authorized-keys.nix
+++ b/system/default/ssh-authorized-keys.nix
@@ -2,7 +2,7 @@
 let
   primaryUser = config.system.primaryUser or "tb";
 
-  ssh_key_tb1 = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAEAQCt0MGma028Fnf9M3VrSZHz+Ieg6DE5WkKg7aqIjqIgYScjO+FXLGnp6bgRiWLOnxzJZqRU7kM3ttubCqgZ4dOKQHgx1je9CrWN45u2lm18H+J3YF9o+eUnLteoZr21tSLkszRyeMvAQbS9879eU/Y5HGv/Z73oes0+03UGNeMhQr8DWro9vBIBFVYUmwm5ie13mdM0mj1MEkvdyvwr15bXSpgIDynXvKuGZgnCFgFroO0y/8XtJkH7FD2qiLeRQ58FsGqVU1ap7YQGCfzfA+zWqDrNCAqMje/RA6S/cuVQV66KPbYkm82uxdF2PzNoR7xTbWmjNHJ0pAeYyUnWyHo/8R++GVnbi3Bw1XlsqACtJv4FK7hEobc6YUvkPw4Mrp6DKiNijOE38goiiCem5ldfaov8JEF8zUwXlkVOezFhSsWLRG1KhrYau0lzVsrTnRva5m++RH9b9WVru/yGpjXQr6vQa6uJOUi1UXdHPY6X45qDR2k2sTr/zLgE8HsPKPkF818k6TH7ogehrpfmKZtPprtks3f20K43EeY/nj3Adyh4JhvtgK0k3ageioTyizjqkuQuJCVXwl/+xVSgGYwNNHmIfldQrvlDcDYwNgsNvAv1SWdbX98LGGN1r+7WlkjWqX9fwlQPWPI+rMQi+LfUBc8TGSxNq2mCu7J+nfSRL5Kg+m4GrN8BrIa89qk6pgd3CTnT/dMTTz3sXbb0ZIF4Z3Q/VbA5eo40CTuhwEAPaktHpSxgo9zLmEQmMoPKMqgi3otSj2AHAlZNKUkxClbVvv7Cx9I5wXMLhLL5kGRtSVVwXwnDnh4WG4Vk0VRBYRQ9X12HkxFA3xAuUhOX9Y8witafapysrP9FuXb5dsFmfY48hCsSh+qPSqnNtl86P1rorEWrGNGSJg7noyRuxE/ykc5XbhIOiK5NC3wDP0xHVTeri9acwq6CmivRC1H/Sn1278GyvLTCe8Mew2WCAFmHKhIj/UZuFctFtSwbOx4JENQXEEODo22iLOO/I7Ia9QSHUW5CmdV+uH37laHCldSzw5f7MUTfTjmA1oVefEO/JnM0oCqX9sSxW8IuZ8vzQIqpZvz90OZ9s7l7VIpKLw0euZR5CpJlsQrE/8+BLyR6WdB+bvgxOovihGSXjPYh7fvYIkx/gW0xBFtbyW8Uuh+O+29QU3IfF6vKHOFxgtwhJLs90z5LUHd5aiwHfbWrcFwAjsaJJn7VKMwdPL6UW3E8kGYrrZfcI5Wws5jJHoc9TRdb4aPjx/tqwlQ3AaYqtGKryM/ZR2dY3xRebnRjMtU/6d4IFSNM4iapUUQQpgPGP9ah3qzzKU/jhqP/Cx1w4pBCV8avEsSO+M49ah8hrNdT";
+  ssh_key_tb1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBW//dhztkY2OJTXK/1tpOdithfSX4tXt3w5CKPJPfFm tb1@ubi";
 in
 {
   # Allow root login with `tb1` ssh key.