From 55f162248aced6221101a67c63c91f3957ee2411 Mon Sep 17 00:00:00 2001
From: Jonni Liljamo <jonni@liljamo.com>
Date: Wed, 10 Dec 2025 20:54:37 +0200
Subject: [PATCH] feat: anti-lockout

---
 lib/default.nix        | 2 ++
 modules/nixos/core.nix | 6 +++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/lib/default.nix b/lib/default.nix
index 447568f..559cdca 100644
--- a/lib/default.nix
+++ b/lib/default.nix
@@ -1,5 +1,7 @@
 {...}: {
   arta = {
+    liljamoPubKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGAlif3ABIk0YSx++A+sEeRYPNMMZWLcDuoTKhmcCL6K jonni@liljamo.com";
+
     colours = import ./colours.nix;
   };
 }
diff --git a/modules/nixos/core.nix b/modules/nixos/core.nix
index f0917c5..7a8f986 100644
--- a/modules/nixos/core.nix
+++ b/modules/nixos/core.nix
@@ -1,7 +1,11 @@
 {
-  flake.modules.nixos.core = {...}: {
+  flake.modules.nixos.core = {lib, ...}: {
     i18n.defaultLocale = "en_US.UTF-8";
 
+    # Anti-lockout.
+    services.openssh.enable = true;
+    users.users.root.openssh.authorizedKeys.keys = [lib.arta.liljamoPubKey];
+
     security.pki.certificates = [(builtins.readFile ../../files/certs/lab.pem)];
   };
 }
-- 
2.44.1