WIP: nixos-anywhere for virtual machines

modules/custom/ssh-certificates.nix

@@ -7,6 +7,14 @@ in {
   options = {
     custom = {
       ssh = {
+        useCertificates = lib.mkOption {
+          type = lib.types.bool;
+          default = false;
+          description = ''
+            Whether to use certificates at all.
+          '';
+        };
+
         hostCert = lib.mkOption {
           type = lib.types.str;
           description = ''
@@ -42,7 +50,7 @@ in {
     };
   };
 
-  config = {
+  config = lib.mkIf cfg.useCertificates {
     services.openssh = {
       extraConfig = ''
         HostCertificate ${hostCert}

modules/disk-config.nix

@@ -31,4 +31,3 @@
     };
   };
 }
-