{"action":"created","issue":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/10155","labels_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/10155/labels{/name}","comments_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/10155/comments","events_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/10155/events","html_url":"https://github.com/NixOS/nixpkgs/pull/10155","id":109121944,"number":10155,"title":"sshd service: allow override of AuthorizedKeysFiles","user":{"login":"aneeshusa","id":2085567,"avatar_url":"https://avatars.githubusercontent.com/u/2085567?v=3","gravatar_id":"","url":"https://api.github.com/users/aneeshusa","html_url":"https://github.com/aneeshusa","followers_url":"https://api.github.com/users/aneeshusa/followers","following_url":"https://api.github.com/users/aneeshusa/following{/other_user}","gists_url":"https://api.github.com/users/aneeshusa/gists{/gist_id}","starred_url":"https://api.github.com/users/aneeshusa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aneeshusa/subscriptions","organizations_url":"https://api.github.com/users/aneeshusa/orgs","repos_url":"https://api.github.com/users/aneeshusa/repos","events_url":"https://api.github.com/users/aneeshusa/events{/privacy}","received_events_url":"https://api.github.com/users/aneeshusa/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-09-30T15:50:28Z","updated_at":"2015-09-30T17:38:34Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/NixOS/nixpkgs/pulls/10155","html_url":"https://github.com/NixOS/nixpkgs/pull/10155","diff_url":"https://github.com/NixOS/nixpkgs/pull/10155.diff","patch_url":"https://github.com/NixOS/nixpkgs/pull/10155.patch"},"body":"When this option was added in 2012, the default passed to mkOption was an empty list, which was reflected in the documentation, but the actual setting was hardcoded so that it could not be overridden.\r\n\r\nIt may be useful to add a note that if services.openssh.authorizedKeysFiles is overridden,\r\n```nix\r\nusers.users.<name?>.openssh.authorizedKeys\r\n```\r\nvalues may not work."},"comment":{"url":"https://api.github.com/repos/NixOS/nixpkgs/issues/comments/144486357","html_url":"https://github.com/NixOS/nixpkgs/pull/10155#issuecomment-144486357","issue_url":"https://api.github.com/repos/NixOS/nixpkgs/issues/10155","id":144486357,"user":{"login":"aneeshusa","id":2085567,"avatar_url":"https://avatars.githubusercontent.com/u/2085567?v=3","gravatar_id":"","url":"https://api.github.com/users/aneeshusa","html_url":"https://github.com/aneeshusa","followers_url":"https://api.github.com/users/aneeshusa/followers","following_url":"https://api.github.com/users/aneeshusa/following{/other_user}","gists_url":"https://api.github.com/users/aneeshusa/gists{/gist_id}","starred_url":"https://api.github.com/users/aneeshusa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aneeshusa/subscriptions","organizations_url":"https://api.github.com/users/aneeshusa/orgs","repos_url":"https://api.github.com/users/aneeshusa/repos","events_url":"https://api.github.com/users/aneeshusa/events{/privacy}","received_events_url":"https://api.github.com/users/aneeshusa/received_events","type":"User","site_admin":false},"created_at":"2015-09-30T17:38:34Z","updated_at":"2015-09-30T17:38:34Z","body":"This doesn't change the default, it just allows you to override it. I agree that it can be dangerous to change, which is why I asked about adding a note - I'm not sure where to document that.\r\n\r\nI personally use CAs instead of raw pubkeys, so I prefer to set this to the empty list. I'm new to NixOS and I wasn't able to change the setting from my configuration.nix - let me know if I'm missing something."}}