modules/ssh: Add config for hetzner's storageboxes

1 files changed, 12 insertions, 0 deletions

diff --git a/modules/by-name/ss/ssh/module.nix b/modules/by-name/ss/ssh/module.nix
index 87c50728..39c203fd 100644
--- a/modules/by-name/ss/ssh/module.nix
+++ b/modules/by-name/ss/ssh/module.nix
@@ -55,6 +55,13 @@ in {
               text = cfg.rootKnownHosts;
             })
           );
+          "Host *.your-storagebox.de" = {
+            # Don't try to authenticate via password for these, because we need to use the
+            # forced commands, and they are only provided via the ssh key login.
+            # So password login is a footgun (it is, however, valid to use it for non-root
+            # use-cases)
+            PasswordAuthentication = false;
+          };
         };
       };
 
@@ -64,6 +71,11 @@ in {
 
         settings = {
           "Host *" = mkDefaultMatchBlock "${config.home-manager.users.soispha.xdg.dataHome}/ssh/known_hosts";
+          "Host *.your-storagebox.de" = {
+            # Port 22 is for sftp, and when we connect as user, we probably want an
+            # interactive shell.
+            Port = 23;
+          };
         };
       };
     };