From 254f9c2577dde3e620e5acce5c3aba30a53d5002 Mon Sep 17 00:00:00 2001
From: hektor <hektor.misplon@pm.me>
Date: Wed, 22 Jul 2026 19:44:38 +0200
Subject: [PATCH] fix(ssh): make SSH client authentication more short-lived

---
 home/modules/ssh/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/home/modules/ssh/default.nix b/home/modules/ssh/default.nix
index 7d7ce77..d1588ef 100644
--- a/home/modules/ssh/default.nix
+++ b/home/modules/ssh/default.nix
@@ -46,7 +46,7 @@ in
         )
         // {
           "*" = {
-            AddKeysToAgent = "yes";
+            AddKeysToAgent = "1h";
             ForwardAgent = false;
             identityFile = [
               "~/.ssh/id_ed25519_sk"
@@ -55,7 +55,7 @@ in
             IdentitiesOnly = true;
             ControlMaster = "auto";
             ControlPath = "~/.ssh/control/%C";
-            ControlPersist = "10m";
+            ControlPersist = "10s";
           };
         };
     };