lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/nixos: refactor ssh_config

Browse source
This commit is contained in:
Luke Granger-Brown 2023-03-12 03:58:52 +00:00
parent 9aa6298df4
commit 721a7e6828
3 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ops/nixos/lib/common.nix
View file

@ -212,9 +212,9 @@ in
programs.ssh = {
extraConfig = ''
CanonicalizeHostname yes
CanonicalDomains int.as205479.net as205479.net
CanonicalDomains int.as205479.net as205479.net otter-acoustic.ts.net
CanonicalizeMaxDots 0
CanonicalizePermittedCNAMEs *.lukegb.com:*.as205479.net,*.int.as205479.net *.lukegb.dev:*.as205479.net,*.int.as205479.net *.zxcvbnm.ninja:*.as205479.net,*.int.as205479.net
CanonicalizePermittedCNAMEs *.lukegb.com:*.as205479.net,*.int.as205479.net,*.otter-acoustic.ts.net *.lukegb.dev:*.as205479.net,*.int.as205479.net,*.otter-acoustic.ts.net *.zxcvbnm.ninja:*.as205479.net,*.int.as205479.net,*.otter-acoustic.ts.net
'';
knownHosts."*" = {
certAuthority = true;

4
ops/nixos/lib/home-manager/ext.nix
View file

@ -8,9 +8,9 @@ in {
programs.ssh = {
extraConfig = ''
CanonicalizeHostname yes
CanonicalDomains int.as205479.net as205479.net
CanonicalDomains int.as205479.net as205479.net otter-acoustic.ts.net
CanonicalizeMaxDots 0
CanonicalizePermittedCNAMEs *.lukegb.com:*.as205479.net,*.int.as205479.net *.lukegb.dev:*.as205479.net,*.int.as205479.net *.zxcvbnm.ninja:*.as205479.net,*.int.as205479.net
CanonicalizePermittedCNAMEs *.lukegb.com:*.as205479.net,*.int.as205479.net,*.otter-acoustic.ts.net *.lukegb.dev:*.as205479.net,*.int.as205479.net,*.otter-acoustic.ts.net *.zxcvbnm.ninja:*.as205479.net,*.int.as205479.net,*.otter-acoustic.ts.net
'';
userKnownHostsFile = "~/.ssh/known_hosts ${caKnownHostsFile}";
};

1
ops/nixos/lib/whitby-distributed.nix
View file

@ -22,6 +22,7 @@
programs.ssh.extraConfig = ''
Host whitby-build
Hostname whitby.tvl.fyi
User lukegb
PubkeyAcceptedKeyTypes ssh-ed25519
IdentityFile ${config.my.vault.secrets.id_ed25519_nixbuild.path}