mirror of
https://git.sr.ht/~rouven/nixos-config
synced 2025-01-18 17:11:39 +01:00
better ssh config
This commit is contained in:
parent
bad96e4197
commit
ac25ed84b0
4 changed files with 48 additions and 37 deletions
|
@ -11,6 +11,17 @@
|
|||
allowedTCPPortRanges = [{ from = 1714; to = 1764; }];
|
||||
allowedUDPPortRanges = allowedTCPPortRanges;
|
||||
};
|
||||
# fix session commands for sway
|
||||
programs.sway = {
|
||||
enable = true;
|
||||
extraSessionCommands = ''
|
||||
source /etc/profile
|
||||
test -f $HOME/.profile && source $HOME/.profile
|
||||
export MOZ_ENABLE_WAYLAND=1
|
||||
systemctl --user import-environment
|
||||
'';
|
||||
wrapperFeatures.gtk = true;
|
||||
};
|
||||
# wayland keylogger needs setuid
|
||||
programs.wshowkeys.enable = true;
|
||||
# fixes pam entries for swaylock
|
||||
|
|
|
@ -45,6 +45,7 @@ in
|
|||
element-desktop
|
||||
gomuks # alternative matrix client
|
||||
mattermost-desktop
|
||||
gajim
|
||||
|
||||
# games
|
||||
# dwarf-fortress-packages.dwarf-fortress-full
|
||||
|
@ -95,6 +96,7 @@ in
|
|||
|
||||
programs.obs-studio.enable = true;
|
||||
programs.firefox.enable = true;
|
||||
services.gnome-keyring.enable = true;
|
||||
|
||||
xdg.mimeApps = {
|
||||
enable = true;
|
||||
|
|
|
@ -6,13 +6,17 @@ in
|
|||
programs.ssh = rec {
|
||||
enable = true;
|
||||
compression = true;
|
||||
controlMaster = "auto";
|
||||
controlPersist = "10m";
|
||||
extraConfig = ''
|
||||
CanonicalizeHostname yes
|
||||
CanonicalDomains agdsn.network ifsr.de
|
||||
PKCS11Provider /run/current-system/sw/lib/libtpm2_pkcs11.so
|
||||
IdentityFile ~/.ssh/id_ed25519
|
||||
VisualHostKey = yes
|
||||
'';
|
||||
matchBlocks = {
|
||||
"artemis-git.inf.tu-dresden.de" = {
|
||||
identityFile = git;
|
||||
};
|
||||
"se-gitlab.inf.tu-dresden.de" = {
|
||||
identityFile = git;
|
||||
};
|
||||
# personal use
|
||||
"github.com" = {
|
||||
identityFile = git;
|
||||
};
|
||||
|
@ -24,54 +28,47 @@ in
|
|||
VerifyHostKeyDNS = "ask";
|
||||
};
|
||||
};
|
||||
# used for nix remote building
|
||||
falkenstein-1 = matchBlocks."rfive.de";
|
||||
"durian" = {
|
||||
hostname = "durian.ifsr.de";
|
||||
user = "root";
|
||||
};
|
||||
"kaki" = {
|
||||
hostname = "kaki.ifsr.de";
|
||||
user = "root";
|
||||
};
|
||||
"ifsr" = {
|
||||
hostname = "ifsr.de";
|
||||
user = "rouven.seifert";
|
||||
};
|
||||
"fsr" = matchBlocks."ifsr";
|
||||
"quitte" = {
|
||||
hostname = "quitte.ifsr.de";
|
||||
user = "root";
|
||||
};
|
||||
"tomate" = {
|
||||
hostname = "tomate.ifsr.de";
|
||||
user = "root";
|
||||
};
|
||||
|
||||
"nuc" = {
|
||||
hostname = "192.168.42.2";
|
||||
user = "root";
|
||||
};
|
||||
"router" = matchBlocks."cudy";
|
||||
"cudy" = {
|
||||
|
||||
"router" = {
|
||||
hostname = "192.168.42.1";
|
||||
user = "root";
|
||||
};
|
||||
"git@raspi" = {
|
||||
match = "Host raspi User git";
|
||||
identityFile = git;
|
||||
|
||||
# iFSR
|
||||
"fsr" = {
|
||||
hostname = "ifsr.de";
|
||||
user = "rouven.seifert";
|
||||
};
|
||||
"*.ifsr.de" = {
|
||||
user = "root";
|
||||
};
|
||||
"git@ifsr.de" = {
|
||||
match = "Host ifsr.de User git";
|
||||
identityFile = git;
|
||||
};
|
||||
|
||||
# AG DSN
|
||||
"dijkstra" = {
|
||||
hostname = "login.agdsn.tu-dresden.de";
|
||||
user = "r5";
|
||||
};
|
||||
"*.agdsn.network" = {
|
||||
user = "r5";
|
||||
extraOptions = {
|
||||
ProxyJump = "dijkstra";
|
||||
};
|
||||
};
|
||||
"git@git.agdsn.de" = {
|
||||
match = "Host git.agdsn.de User git";
|
||||
identityFile = git;
|
||||
};
|
||||
};
|
||||
extraConfig = ''
|
||||
PKCS11Provider /run/current-system/sw/lib/libtpm2_pkcs11.so
|
||||
IdentityFile ~/.ssh/id_ed25519
|
||||
VisualHostKey = yes
|
||||
'';
|
||||
};
|
||||
}
|
||||
|
|
|
@ -8,6 +8,7 @@
|
|||
systemd.user.sessionVariables.GTK_THEME = "Dracula";
|
||||
qt = {
|
||||
enable = true;
|
||||
platformTheme = "gtk";
|
||||
style = {
|
||||
name = "Dracula";
|
||||
package = pkgs.dracula-theme;
|
||||
|
|
Loading…
Reference in a new issue