From 7c9451989aaaf9bd8739db0972f8b5d7dcc99c1d Mon Sep 17 00:00:00 2001
From: Kiara Grouwstra <kiara@procolix.eu>
Date: Mon, 18 Aug 2025 12:47:05 +0200
Subject: [PATCH] add keys

---
 deployment/check/common/targetNode.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/deployment/check/common/targetNode.nix b/deployment/check/common/targetNode.nix
index e88be811..b40578d6 100644
--- a/deployment/check/common/targetNode.nix
+++ b/deployment/check/common/targetNode.nix
@@ -44,6 +44,18 @@ in
 
       ## Test VMs don't have a bootloader by default.
       boot.loader.grub.enable = false;
+
+      users.users.root.openssh.authorizedKeys.keys =
+        let
+          keys = import ../../../keys;
+        in
+        lib.attrValues keys.contributors
+        ++ [
+          # allow our panel vm access to the test machines
+          keys.panel
+          # allow continuous deployment access
+          keys.cd
+        ];
     }
 
     (mkIf config.enableAcme {