chvp/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix ssh host config as root

Browse source
This commit is contained in:
Charlotte Van Petegem 2021-09-16 15:29:17 +02:00
parent 97409f47e4
commit ca36ff4bf1
No known key found for this signature in database
GPG key ID: 019E764B7184435A
1 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

13
modules/base/ssh/default.nix
View file

@ -12,7 +12,7 @@ let
pkgs.openssh pkgs.openssh
]; ];
}; };
base = home: { base = home: user: {
programs.ssh = { programs.ssh = {
enable = true; enable = true;
compression = true; compression = true;
@ -22,7 +22,7 @@ let
userKnownHostsFile = "${config.chvp.cachePrefix}${home}/.ssh/known_hosts"; userKnownHostsFile = "${config.chvp.cachePrefix}${home}/.ssh/known_hosts";
serverAliveInterval = 10; serverAliveInterval = 10;
extraOptionOverrides = { extraOptionOverrides = {
Include = config.age.secrets."files/programs/ssh/host_configuration".path; Include = config.age.secrets."files/programs/ssh/host_configuration_${user}".path;
IdentityFile = "${config.chvp.dataPrefix}${home}/.ssh/id_ed25519"; IdentityFile = "${config.chvp.dataPrefix}${home}/.ssh/id_ed25519";
HostKeyAlgorithms = "ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa"; HostKeyAlgorithms = "ssh-ed25519-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa";
}; };
@ -31,10 +31,13 @@ let
}; };
in in
{ {
home-manager.users.root = { ... }: (base "/root"); home-manager.users.root = { ... }: (base "/root" "root");
home-manager.users.charlotte = { ... }: (base "/home/charlotte"); home-manager.users.charlotte = { ... }: (base "/home/charlotte" "charlotte");
age.secrets."files/programs/ssh/host_configuration" = { age.secrets."files/programs/ssh/host_configuration_charlotte" = {
file = ../../../secrets/files/programs/ssh/host_configuration.age; file = ../../../secrets/files/programs/ssh/host_configuration.age;
owner = "charlotte"; owner = "charlotte";
}; };
age.secrets."files/programs/ssh/host_configuration_root" = {
file = ../../../secrets/files/programs/ssh/host_configuration.age;
};
} }