SSH identity changes on restart when `ssh.key_path` is set

[giorgiga]

Describe the bug

I have set ssh.key_path and the public key reported by ssh-keyscan does not correspond to the private key I specified. Moreover, a new key is generated whenever I restart soft-serve. No keys are saved to soft-serve/ssh.

Removing the ssh.key_path causes keys to be generated at soft-serve/ssh and those work as expected.

To Reproduce
Steps to reproduce the behavior:

1. set ssh.key_path to point to some key not in the default location
2. restart soft-serve
3. use ssh-keyscan and verify that the identity reported does not correspond to the public key of the key set in ssh.key_path
4. restart soft-serve
5. use ssh-keyscan and verify that the reported identity has changed

Expected behavior
It should use the configured private key

Screenshots
n/a

Environment (please complete the following information):

• OS: nixos 25.11
• Terminal n/a
• Version docker.io/charmcli/soft-serve:v0.11.3 image run via podman (nixos' oci-containers feature)

Additional context
let me know if I can provide any additional info