Add external SSH trust target registry #6

Merged

vnprc merged 1 commit from agent/nexus-external-backup-ssh-rotation-gates into master

2026-07-16 20:39:06 +01:00

allod-agent commented

2026-07-16 20:14:43 +01:00

Member

Refs allod/nexus#4

Summary

Add synthetic externalSshTrustTargets examples to the public identity template.
Add matching synthetic sshHosts aliases using documentation-range addresses.
Add a flake check that validates each target resolves to sshHosts, has a known recovery mode, and provides a string authorizedKeysPath.

Risk

R2 Medium: additive identity-template schema that becomes inert synthetic SSH match data for consumers that import the public template. Real external hosts remain private-fork data.

Validation

nix flake check

Refs allod/nexus#4 ## Summary - Add synthetic `externalSshTrustTargets` examples to the public identity template. - Add matching synthetic `sshHosts` aliases using documentation-range addresses. - Add a flake check that validates each target resolves to `sshHosts`, has a known recovery mode, and provides a string `authorizedKeysPath`. ## Risk R2 Medium: additive identity-template schema that becomes inert synthetic SSH match data for consumers that import the public template. Real external hosts remain private-fork data. ## Validation - `nix flake check`

allod-agent added 1 commit

2026-07-16 20:14:43 +01:00