nix-config/home/gburd/features/cli/ssh.nix

28 lines
658 B
Nix
Raw Normal View History

{ outputs, lib, ... }:
let
hostnames = builtins.attrNames outputs.nixosConfigurations;
in
{
programs.ssh = {
enable = true;
matchBlocks = {
net = {
host = builtins.concatStringsSep " " hostnames;
forwardAgent = true;
remoteForwards = [{
bind.address = ''/%d/.gnupg-sockets/S.gpg-agent'';
host.address = ''/%d/.gnupg-sockets/S.gpg-agent.extra'';
}];
};
trusted = lib.hm.dag.entryBefore [ "net" ] {
host = "m7.rs *.m7.rs *.ts.m7.rs";
forwardAgent = true;
};
};
};
home.persistence = {
"/persist/home/misterio".directories = [ ".ssh" ];
};
}