Update ssh client config

This commit is contained in:
Erwin Boskma 2022-11-01 19:57:52 +01:00
parent e227dd5f24
commit 3e12224b39
Signed by: erwin
SSH key fingerprint: SHA256:CyeNoWXd3kjX2Nwu6pDxxdS7OqmPVOy0NavA/KU/ntU

View file

@ -5,6 +5,8 @@
}: }:
with lib; let with lib; let
cfg = config.eboskma.programs.ssh; cfg = config.eboskma.programs.ssh;
personalKey = "~/.ssh/id_ed25519_sk";
horusKey = "~/.ssh/id_ed25519_sk_horus";
in in
{ {
options.eboskma.programs.ssh = { enable = mkEnableOption "activate ssh"; }; options.eboskma.programs.ssh = { enable = mkEnableOption "activate ssh"; };
@ -15,7 +17,7 @@ in
hashKnownHosts = true; hashKnownHosts = true;
matchBlocks = { matchBlocks = {
"*" = { "*" = {
identityFile = "~/.ssh/id_ed25519_sk"; identityFile = personalKey;
identitiesOnly = true; identitiesOnly = true;
extraOptions = { extraOptions = {
Ciphers = "chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr"; Ciphers = "chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr";
@ -70,6 +72,7 @@ in
horus-vpn = { horus-vpn = {
hostname = "192.168.4.202"; hostname = "192.168.4.202";
identityFile = horusKey;
}; };
"repohost.bedum.horus.nu" = { "repohost.bedum.horus.nu" = {