danielsiepmann/nixpkgs
danielsiepmann/nixpkgs
1
0
Code Releases Activity
nixpkgs/home/programs/ssh.nix

20 lines
254 B
Nix
Raw Permalink Normal View History

Add SSH Configure ssh, use git-crypt to crypt the configuration. That way no information like domain name, ip, port, username, etc. are exposed.
2022-05-24 11:55:50 +02:00
_:
Use KeepassXC as SSH Agent This replaces the configuration of files per ssh match block, as well as the need for keychain. See: https://keepassxc.org/docs/KeePassXC_UserGuide#_ssh_agent
2023-05-24 19:54:41 +02:00
{
Add SSH Configure ssh, use git-crypt to crypt the configuration. That way no information like domain name, ip, port, username, etc. are exposed.
2022-05-24 11:55:50 +02:00
enable = true;
Refactor ssh keys Make public what is already known to the public. Also define keys in variables for easier maintenance. Some hostings still don't support ed.
2022-05-24 16:44:17 +02:00
matchBlocks = {
Enable UpdateHostKeys for ssh This fetches all new host keys when connecting to an existing host. This allows to fetch newer keys and prevents a question if old keys no longer exist.
2023-03-15 11:03:54 +01:00
"*" = {
extraOptions = {
UpdateHostKeys = "yes";
};
};
Refactor ssh keys Make public what is already known to the public. Also define keys in variables for easier maintenance. Some hostings still don't support ed.
2022-05-24 16:44:17 +02:00
"github.com" = {
user = "git";
hostname = "github.com";
};
Use KeepassXC as SSH Agent This replaces the configuration of files per ssh match block, as well as the need for keychain. See: https://keepassxc.org/docs/KeePassXC_UserGuide#_ssh_agent
2023-05-24 19:54:41 +02:00
} // import ./ssh-match-blocks.nix { };
Add SSH Configure ssh, use git-crypt to crypt the configuration. That way no information like domain name, ip, port, username, etc. are exposed.
2022-05-24 11:55:50 +02:00
}
Copy permalink