Mic92
/
stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

github: move known-hosts into separate file

This commit is contained in:
tv 2022-09-20 11:21:04 +02:00
parent 0c589031c0
commit 16cce4be93
2 changed files with 65 additions and 61 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

58
krebs/3modules/github/known-hosts.json Normal file
View File

@ -0,0 +1,58 @@
[
"192.30.252.*",
"192.30.253.*",
"192.30.254.*",
"192.30.255.*",
"185.199.108.*",
"185.199.109.*",
"185.199.110.*",
"185.199.111.*",
"140.82.112.*",
"140.82.113.*",
"140.82.114.*",
"140.82.115.*",
"140.82.116.*",
"140.82.117.*",
"140.82.118.*",
"140.82.119.*",
"140.82.120.*",
"140.82.121.*",
"140.82.122.*",
"140.82.123.*",
"140.82.124.*",
"140.82.125.*",
"140.82.126.*",
"140.82.127.*",
"143.55.64.*",
"143.55.65.*",
"143.55.66.*",
"143.55.67.*",
"143.55.68.*",
"143.55.69.*",
"143.55.70.*",
"143.55.71.*",
"143.55.72.*",
"143.55.73.*",
"143.55.74.*",
"143.55.75.*",
"143.55.76.*",
"143.55.77.*",
"143.55.78.*",
"143.55.79.*",
"20.201.28.151",
"20.205.243.166",
"102.133.202.242",
"20.248.137.48",
"20.207.73.82",
"20.27.177.113",
"20.200.245.247",
"20.233.54.53",
"20.201.28.152",
"20.205.243.160",
"102.133.202.246",
"20.248.137.50",
"20.207.73.83",
"20.27.177.118",
"20.200.245.248",
"20.233.54.52"
]

68
krebs/3modules/github/known-hosts.nix
View File

@ -1,66 +1,12 @@
{
{ lib, ... }: {
services.openssh.knownHosts.github = {
hostNames = [
"github.com"
hostNames =
["github.com"]
++
# List generated with (IPv6 addresses are currently ignored):
# curl -sS https://api.github.com/meta | jq -r .git[] | grep -v : | nix-shell -p cidr2glob --run cidr2glob | jq -R .
"192.30.252.*"
"192.30.253.*"
"192.30.254.*"
"192.30.255.*"
"185.199.108.*"
"185.199.109.*"
"185.199.110.*"
"185.199.111.*"
"140.82.112.*"
"140.82.113.*"
"140.82.114.*"
"140.82.115.*"
"140.82.116.*"
"140.82.117.*"
"140.82.118.*"
"140.82.119.*"
"140.82.120.*"
"140.82.121.*"
"140.82.122.*"
"140.82.123.*"
"140.82.124.*"
"140.82.125.*"
"140.82.126.*"
"140.82.127.*"
"143.55.64.*"
"143.55.65.*"
"143.55.66.*"
"143.55.67.*"
"143.55.68.*"
"143.55.69.*"
"143.55.70.*"
"143.55.71.*"
"143.55.72.*"
"143.55.73.*"
"143.55.74.*"
"143.55.75.*"
"143.55.76.*"
"143.55.77.*"
"143.55.78.*"
"143.55.79.*"
"20.201.28.151"
"20.205.243.166"
"102.133.202.242"
"20.248.137.48"
"20.207.73.82"
"20.27.177.113"
"20.200.245.247"
"20.233.54.53"
"20.201.28.152"
"20.205.243.160"
"102.133.202.246"
"20.248.137.50"
"20.207.73.83"
"20.27.177.118"
"20.200.245.248"
"20.233.54.52"
];
# curl -sS https://api.github.com/meta | jq -r .git[] | grep -v : | nix-shell -p cidr2glob --run cidr2glob | jq -Rs 'split("\n")|map(select(.!=""))' > known-hosts.json
lib.importJSON ./known-hosts.json
;
publicKey = "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==";
};
}