home/environ/ssh.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

{
  config,
  lib,
  pkgs,
  ...
}:
with lib; let
  cfg = config.local.environ;
in {
  config = mkIf cfg.enable {
    programs.ssh = {
      enable = true;

      compression = true;
      controlMaster = "auto";
      controlPath = "/run/user/%i/ssh/master-%r@%n:%p";

      extraOptionOverrides.AddKeysToAgent = "true";

      matchBlocks = import ./ssh-match.nix;
    };

    systemd.user.tmpfiles.rules = [
      "d %t/ssh 0700"
    ];
  };
}