From 1b3ede31d963d32f8789f6e7393d4cd19bfe60a0 Mon Sep 17 00:00:00 2001
From: Paul Whalen <pwhalen@fedoraproject.org>
Date: Feb 24 2026 22:04:31 +0000
Subject: fix: use 90- prefix for authorized-keys-file.conf


Updates the config file numbering to ensure crypto policies(40)
and security configs(50) are applied before user keys are sourced.

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>

---

diff --git a/sshd-authorized-keys.yaml b/sshd-authorized-keys.yaml
index 600321f..4080a64 100644
--- a/sshd-authorized-keys.yaml
+++ b/sshd-authorized-keys.yaml
@@ -12,7 +12,7 @@ postprocess:
     set -xeuo pipefail
 
     # Configure sshd to read keys from authorized_keys.d directory
-    cat > /etc/ssh/sshd_config.d/40-authorized-keys-file.conf << 'EOF'
+    cat > /etc/ssh/sshd_config.d/90-authorized-keys-file.conf << 'EOF'
     # Also accept keys configured by Ignition and Afterburn
     AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys.d/*
     EOF