home/ebisu/fortune/system/ssh.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

{ config, secrets, ... }:
{
  programs.ssh = {
    enable = true;
    addKeysToAgent = "yes";
    serverAliveInterval = 60;
    serverAliveCountMax = 10;

    extraConfig = ''
      IgnoreUnknown UseKeychain
      UseKeychain yes
      IPQoS lowdelay throughput
    '';

    matchBlocks = {
      "watson".user = "root";
      "fina".hostname = "192.168.1.215";
      "himeji".user = "root";

      "github.com" = {
        user = "git";
        identityFile = "${config.home.homeDirectory}/.ssh/id_rsa";
      };

      "aur.archlinux.org" = {
        user = "aur";
        identityFile = "${config.home.homeDirectory}/.ssh/aur";
      };

      "seti" = {
        user = "root";
        port = 2222;
        identityFile = "${config.home.homeDirectory}/.ssh/seti";
      };

      "oit" = {
        inherit (secrets.ssh.oit) hostname user;
      };

      "eu.nixbuild.net" = {
        port = 2222;
        identityFile = "${config.home.homeDirectory}/.ssh/id_ed25519.1";
      };
    };
  };
}