diff options
| author | Benedikt Peetz <benedikt.peetz@b-peetz.de> | 2026-11-02 19:55:32 +0100 |
|---|---|---|
| committer | Benedikt Peetz <benedikt.peetz@b-peetz.de> | 2026-11-05 22:47:43 +0100 |
| commit | 83f0daa6c54c26ad240c46722d3ad84f853f517a (patch) | |
| tree | 64ea00623691af7ba27d36a8bb3d0faa9a67096f /modules/by-name/ss | |
| parent | pkgs/*: Use a `stable`/`unstable` marker in the filename (diff) | |
| download | nixos-config-83f0daa6c54c26ad240c46722d3ad84f853f517a.zip | |
modules/*: Fix various name mistakes and other issues
Diffstat (limited to 'modules/by-name/ss')
| -rw-r--r-- | modules/by-name/ss/ssh/module.nix | 52 |
1 files changed, 9 insertions, 43 deletions
diff --git a/modules/by-name/ss/ssh/module.nix b/modules/by-name/ss/ssh/module.nix index 39c203fd..6926547e 100644 --- a/modules/by-name/ss/ssh/module.nix +++ b/modules/by-name/ss/ssh/module.nix @@ -29,53 +29,19 @@ in { options.soispha.programs.ssh = { enable = lib.mkEnableOption "ssh config"; - rootKnownHosts = lib.mkOption { - type = lib.types.attrsOf lib.types.str; - description = '' - An attrset of keys (the domain) and values (the host key.) - These are only applied to the root user. - ''; - default = {}; - apply = value: - builtins.concatStringsSep "\n" - (lib.attrsets.mapAttrsToList (hostName: hostKey: "${hostName} ${hostKey}") value); - }; }; config = lib.mkIf cfg.enable { - home-manager.users = { - root.programs.ssh = { - enable = true; - enableDefaultConfig = false; - - settings = { - "Host *" = mkDefaultMatchBlock ( - builtins.toString (pkgs.writeTextFile { - name = "root-known-hosts"; - text = cfg.rootKnownHosts; - }) - ); - "Host *.your-storagebox.de" = { - # Don't try to authenticate via password for these, because we need to use the - # forced commands, and they are only provided via the ssh key login. - # So password login is a footgun (it is, however, valid to use it for non-root - # use-cases) - PasswordAuthentication = false; - }; - }; - }; - - soispha.programs.ssh = { - enable = true; - enableDefaultConfig = false; + home-manager.users.soispha.programs.ssh = { + enable = true; + enableDefaultConfig = false; - settings = { - "Host *" = mkDefaultMatchBlock "${config.home-manager.users.soispha.xdg.dataHome}/ssh/known_hosts"; - "Host *.your-storagebox.de" = { - # Port 22 is for sftp, and when we connect as user, we probably want an - # interactive shell. - Port = 23; - }; + settings = { + "Host *" = mkDefaultMatchBlock "${config.home-manager.users.soispha.xdg.dataHome}/ssh/known_hosts"; + "Host *.your-storagebox.de" = { + # Port 22 is for sftp, and when we connect as user, we probably want an + # interactive shell. + Port = 23; }; }; }; |
