common/known-ssh-keys: init

Let's ensure that all our servers are aware of all host keys to avoid
host key verification issues when needed.

(example: buildbot → gerrit)

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>

common/base-server.nix

@@ -1,4 +1,8 @@
 { lib, pkgs, ... }: {
+  imports = [
+    ./known-ssh-keys.nix
+  ];
+
   nixpkgs.overlays = import ../overlays;
 
   nix.package = lib.mkDefault pkgs.lix;

common/known-ssh-keys.nix

@@ -0,0 +1,9 @@
+{ ... }:
+let
+  ssh-keys = import ./ssh-keys;
+in
+{
+  programs.ssh.knownHosts = {
+    "cl.forkos.org".publicKey = ssh-keys.gerrit01;
+  };
+}