64 lines
1.4 KiB
Nix
64 lines
1.4 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
myUtils,
|
|
paths,
|
|
...
|
|
}:
|
|
|
|
let
|
|
cfg = config.ssh;
|
|
hostNames = myUtils.dirNames paths.hosts;
|
|
hostsWithKeys = lib.filter (
|
|
hostname: builtins.pathExists (paths.hosts + "/${hostname}/ssh_host.pub")
|
|
) hostNames;
|
|
in
|
|
{
|
|
options.ssh.enable = lib.mkEnableOption "ssh";
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
home.packages = with pkgs; [ sshfs ];
|
|
|
|
home.file.".ssh/control/.keep".text = "";
|
|
|
|
services.ssh-agent.enable = true;
|
|
|
|
systemd.user.services.ssh-agent.Service.Environment = [
|
|
"SSH_ASKPASS=${pkgs.lxqt.lxqt-openssh-askpass}/bin/lxqt-openssh-askpass"
|
|
"SSH_ASKPASS_REQUIRE=prefer"
|
|
];
|
|
|
|
programs.ssh = {
|
|
enable = true;
|
|
enableDefaultConfig = false;
|
|
|
|
settings =
|
|
lib.genAttrs hostsWithKeys (
|
|
hostname:
|
|
let
|
|
meta = myUtils.hostMeta (paths.hosts + "/${hostname}");
|
|
in
|
|
{
|
|
User = meta.host.username;
|
|
HostName = hostname;
|
|
}
|
|
)
|
|
// {
|
|
"*" = {
|
|
AddKeysToAgent = "1h";
|
|
ForwardAgent = false;
|
|
identityFile = [
|
|
"~/.ssh/id_ed25519_sk"
|
|
"~/.ssh/id_ed25519_sk_bak"
|
|
];
|
|
IdentitiesOnly = true;
|
|
ControlMaster = "auto";
|
|
ControlPath = "~/.ssh/control/%C";
|
|
ControlPersist = "10s";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|