45 lines
967 B
Nix
45 lines
967 B
Nix
{ config, lib, pkgs, ... }:
|
|
let
|
|
cfg = config.programs.ssh;
|
|
runtimeDir = "/run/user/${toString config.home.uid}";
|
|
controlMastersDir = "${runtimeDir}/ssh";
|
|
in
|
|
{
|
|
imports = [
|
|
./home.nix
|
|
./other.nix
|
|
./pvv.nix
|
|
./kyoto-u.nix
|
|
];
|
|
config = lib.mkIf cfg.enable {
|
|
|
|
sops.secrets."ssh/secret-config" = {
|
|
mode = "0444";
|
|
};
|
|
|
|
programs.ssh = {
|
|
includes = [
|
|
config.sops.secrets."ssh/secret-config".path
|
|
"${config.home.homeDirectory}/.ssh/mutable_config"
|
|
];
|
|
|
|
matchBlocks."*" = {
|
|
controlMaster = "auto";
|
|
controlPersist = "10m";
|
|
controlPath = "${controlMastersDir}/%n%C";
|
|
};
|
|
};
|
|
|
|
systemd.user.tmpfiles.settings."10-ssh" = {
|
|
${controlMastersDir}.d = {
|
|
user = config.home.username;
|
|
mode = "0700";
|
|
};
|
|
"${config.home.homeDirectory}/.ssh/mutable_config".f = {
|
|
user = config.home.username;
|
|
mode = "0600";
|
|
};
|
|
};
|
|
};
|
|
}
|