NixOS configuration 馃獎
1{ osConfig, ... }:
2{
3 programs.ssh = {
4 enable = true;
5 enableDefaultConfig = false;
6
7 matchBlocks = {
8 "*" = {
9 serverAliveCountMax = 3;
10
11 hashKnownHosts = true;
12 userKnownHostsFile = "~/.ssh/known_hosts";
13
14 controlPath = "~/.ssh/master-%r@%n:%p";
15 controlPersist = "no";
16 };
17
18 "github.com" = {
19 user = "git";
20 hostname = "github.com";
21 identityFile = osConfig.age.secrets."ssh-gh".path;
22 };
23
24 "apricot" = { # TODO: manage it into: knot.xaiya.dev
25 user = "git";
26 hostname = "apricot";
27 identityFile = osConfig.age.secrets."ssh-tangled".path;
28 };
29 };
30 };
31}