From f2b2e26ba9858d02c7ce0a81f8bb4c83ff1ebc5d Mon Sep 17 00:00:00 2001
From: JuliusFreudenberger <julius+git@jfreudenberger.de>
Date: Fri, 27 Mar 2026 01:29:56 +0100
Subject: [PATCH] Add sample for opkssh module

Module will not be added here as usernames, principals and the client id
have to be specified directly.
Setting them via age secrets is not possible.
---
 modules/opkssh.sample.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 modules/opkssh.sample.nix

diff --git a/modules/opkssh.sample.nix b/modules/opkssh.sample.nix
new file mode 100644
index 0000000..55c8383
--- /dev/null
+++ b/modules/opkssh.sample.nix
@@ -0,0 +1,18 @@
+{
+  ...
+}: {
+  services.opkssh = {
+    enable = true;
+    providers = {
+      pocket-id = {
+        issuer = "https://example.com";
+        clientId = "";
+        lifetime = "12h";
+      };
+    };
+    authorizations = [
+      { user = "<username>"; principal = "<email>"; issuer = "https://example.com"; }
+    ];
+  };
+}
+