From d48e81d214584898e0654b9c61620d65ecc99a99 Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Tue, 7 Jul 2026 01:20:46 +0200
Subject: modules/ssh: Add config for hetzner's storageboxes

---
 modules/by-name/ss/ssh/module.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/modules/by-name/ss/ssh/module.nix b/modules/by-name/ss/ssh/module.nix
index 87c50728..39c203fd 100644
--- a/modules/by-name/ss/ssh/module.nix
+++ b/modules/by-name/ss/ssh/module.nix
@@ -55,6 +55,13 @@ in {
               text = cfg.rootKnownHosts;
             })
           );
+          "Host *.your-storagebox.de" = {
+            # Don't try to authenticate via password for these, because we need to use the
+            # forced commands, and they are only provided via the ssh key login.
+            # So password login is a footgun (it is, however, valid to use it for non-root
+            # use-cases)
+            PasswordAuthentication = false;
+          };
         };
       };
 
@@ -64,6 +71,11 @@ in {
 
         settings = {
           "Host *" = mkDefaultMatchBlock "${config.home-manager.users.soispha.xdg.dataHome}/ssh/known_hosts";
+          "Host *.your-storagebox.de" = {
+            # Port 22 is for sftp, and when we connect as user, we probably want an
+            # interactive shell.
+            Port = 23;
+          };
         };
       };
     };
-- 
cgit v1.3.1