Configure ssh, use git-crypt to crypt the configuration.
That way no information like domain name, ip, port, username, etc. are
exposed.
This commit is contained in:
Daniel Siepmann 2022-05-24 11:55:50 +02:00
parent 3f2fee8a6f
commit 90b5f5b6d0
Signed by: Daniel Siepmann
GPG key ID: 33D6629915560EF4
6 changed files with 12 additions and 2 deletions

1
.gitattributes vendored Normal file
View file

@ -0,0 +1 @@
home/programs/ssh-match-blocks.nix filter=git-crypt diff=git-crypt

View file

@ -22,6 +22,7 @@ with pkgs; [
bc
borgbackup
git-crypt
keepassxc
libreoffice

View file

@ -39,6 +39,9 @@
inherit config pkgs;
};
ssh = import ./programs/ssh.nix {
};
zathura = import ./programs/zathura.nix {
};

Binary file not shown.

7
home/programs/ssh.nix Normal file
View file

@ -0,0 +1,7 @@
_:
{
enable = true;
matchBlocks = import ./ssh-match-blocks.nix {
};
}

View file

@ -110,8 +110,6 @@ Migration:
* Thunderbird configuration to nix. Seems like no module exists, but is same as
for firefox.
* Migrate ssh config (I don't really like to expose customer server names and configs to outer world, how to handle?)
* Migrate PGP?
* Right now I've installed gnupg2, gnupg, gpg on ubuntu