lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

hm/ext: init SSH config tweaks for 3p systems

Browse source
This commit is contained in:
Luke Granger-Brown 2022-10-08 21:14:36 +01:00
parent 17b138e8f0
commit 746c427690
2 changed files with 18 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
ops/nixos/lib/home-manager/ext.nix Normal file
View file

@ -0,0 +1,17 @@
{ config, lib, pkgs, ... }:
let
caKnownHostsFile = pkgs.writeText "ca-known-hosts" ''
@cert-authority * ${builtins.readFile ../../../secrets/server-ca.pub}
'';
in {
programs.ssh = {
extraConfig = ''
CanonicalizeHostname yes
CanonicalDomains int.as205479.net as205479.net
CanonicalizeMaxDots 0
CanonicalizePermittedCNAMEs *.lukegb.com:*.as205479.net,*.int.as205479.net *.lukegb.dev:*.as205479.net,*.int.as205479.net *.zxcvbnm.ninja:*.as205479.net,*.int.as205479.net
'';
userKnownHostsFile = "~/.ssh/known_hosts ${caKnownHostsFile}";
};
}

2
ops/nixos/lib/home-manager/porcorosso-wsl.nix
View file

@ -1,6 +1,6 @@
{ pkgs, depot, lib, config, ... }: { pkgs, depot, lib, config, ... }:
{ {
imports = [ ./graphical-client-wayland.nix ]; imports = [ ./graphical-client-wayland.nix ./ext.nix ];
config = { config = {
programs.keychain = { programs.keychain = {