From 1ab3ae3769a5b13c220ffb17b12cdc6e53223088 Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Sun, 16 Nov 2025 16:05:57 +0100
Subject: [PATCH] pkgs/clerie-ssh-known-hosts: Pin some more SSH host keys that
 can net be retrieved automatically

---
 pkgs/clerie-ssh-known-hosts/additional-ssh-known-hosts | 10 ++++++++++
 pkgs/clerie-ssh-known-hosts/default.nix                |  6 +++++-
 2 files changed, 15 insertions(+), 1 deletion(-)
 create mode 100644 pkgs/clerie-ssh-known-hosts/additional-ssh-known-hosts

diff --git a/pkgs/clerie-ssh-known-hosts/additional-ssh-known-hosts b/pkgs/clerie-ssh-known-hosts/additional-ssh-known-hosts
new file mode 100644
index 0000000..c5b6799
--- /dev/null
+++ b/pkgs/clerie-ssh-known-hosts/additional-ssh-known-hosts
@@ -0,0 +1,10 @@
+backup.clerie.de ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBsTlqDyK726hwhX8lbs9EhMrkf3LsKIm5Ya3k39C7VZ
+git.clerie.de ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHQDwfRlw6L+pkLjXDgW2BUWlY1zNEDtVhNEsClgqaL
+
+mercury.net.clerie.de ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH4HbnxUyBAxidh88rIvG9tf61/VWjndMLOSvx9LZY+u
+
+clerie.uber.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINT6gukzAjyu8ST6ndP5TgXWEfdksxyqmMz4ngQkyVLr
+cleriewi.uber.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH3k7sMhABfQr9CufavOY6BCXJPpDH5OFkRpz/vJ2gSF
+
+ceea.uber.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJg2Vr3/SucAM13pZGR36W/LPFcTI9nCQAIIATIZGL9A
+reichart.uber.space ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINhafJF7TZPAhX1hj4saom21RqkOMVFF7bLVKaEC+vcB
diff --git a/pkgs/clerie-ssh-known-hosts/default.nix b/pkgs/clerie-ssh-known-hosts/default.nix
index 8a573de..34216fb 100644
--- a/pkgs/clerie-ssh-known-hosts/default.nix
+++ b/pkgs/clerie-ssh-known-hosts/default.nix
@@ -17,5 +17,9 @@ in writeTextFile {
   destination = "/known_hosts";
   allowSubstitutes = true;
   preferLocalBuild = false;
-  text = knownHosts;
+  text = ''
+    ${knownHosts}
+
+    ${builtins.readFile ./additional-ssh-known-hosts}
+  '';
 }