home/ssh/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

{ config, lib, pkgs, ... }:
with lib; {
  config = {
    programs.ssh = mkIf (!config.home.isolation.active) {
      enable = true;

      compression = true;
      controlMaster = "autoask";
      controlPath = "/run/user/%i/ssh/master-%r@%n:%p";

      extraOptionOverrides.AddKeysToAgent = "true";

      matchBlocks = import ./match.nix;
    };

    systemd.user.tmpfiles.rules = [
      "d %t/ssh 0700"
    ];
  };
}