From 3102be50ead3314d0d3081131c3f80ef94d11586 Mon Sep 17 00:00:00 2001
From: Kiara Grouwstra <kiara@procolix.eu>
Date: Mon, 25 Aug 2025 19:40:48 +0200
Subject: [PATCH] simplify auth to not accept password

---
 deployment/check/data-model/deployment.nix |  2 +-
 deployment/data-model.nix                  | 18 ++++--------------
 2 files changed, 5 insertions(+), 15 deletions(-)

diff --git a/deployment/check/data-model/deployment.nix b/deployment/check/data-model/deployment.nix
index f843dbb0..78893e97 100644
--- a/deployment/check/data-model/deployment.nix
+++ b/deployment/check/data-model/deployment.nix
@@ -32,7 +32,7 @@ let
                 ssh = {
                   host = "localhost";
                   username = "root";
-                  authentication.password = "password";
+                  key-file = null;
                 };
                 nixos-configuration =
                   { pkgs, ... }:
diff --git a/deployment/data-model.nix b/deployment/data-model.nix
index e41c4030..581daa8a 100644
--- a/deployment/data-model.nix
+++ b/deployment/data-model.nix
@@ -45,20 +45,10 @@ let
           type = nullOr str;
           default = null;
         };
-        authentication = mkOption {
-          description = "authentication method";
-          type = attrTag {
-            private-key = mkOption {
-              description = "path to the user's SSH private key";
-              type = str;
-              example = "/root/.ssh/id_ed25519";
-            };
-            password = mkOption {
-              description = "SSH password";
-              # TODO: mark as sensitive
-              type = str;
-            };
-          };
+        key-file = mkOption {
+          description = "path to the user's SSH private key";
+          type = nullOr str;
+          example = "/root/.ssh/id_ed25519";
         };
       };
     };