From dea95b63c816775037e05123960975ce889f63d3 Mon Sep 17 00:00:00 2001
From: Kiara Grouwstra <kiara@procolix.eu>
Date: Mon, 18 Aug 2025 12:47:05 +0200
Subject: [PATCH] add keys

---
 deployment/check/common/targetNode.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/deployment/check/common/targetNode.nix b/deployment/check/common/targetNode.nix
index a346d873..8e760888 100644
--- a/deployment/check/common/targetNode.nix
+++ b/deployment/check/common/targetNode.nix
@@ -42,6 +42,18 @@ in
 
       ## Test VMs don't have a bootloader by default.
       boot.loader.grub.enable = false;
+
+      users.users.root.openssh.authorizedKeys.keys =
+        let
+          keys = import ../../../keys;
+        in
+        lib.attrValues keys.contributors
+        ++ [
+          # allow our panel vm access to the test machines
+          keys.panel
+          # allow continuous deployment access
+          keys.cd
+        ];
     }
 
     (mkIf config.enableAcme {