Harald Hoyer
949e39cdba
- Commented out default SSH service enablement in common suite. - Updated SSH agent configuration to use dynamic user paths. - Removed outdated SSH keys and added missing key descriptions.
41 lines
853 B
Nix
41 lines
853 B
Nix
{
|
|
lib,
|
|
config,
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}:
|
|
|
|
let
|
|
inherit (lib) types mkEnableOption mkIf;
|
|
inherit (lib.metacfg) mkOpt;
|
|
|
|
cfg = config.metacfg.security.ssh;
|
|
in
|
|
{
|
|
options.metacfg.security.ssh = {
|
|
enable = mkEnableOption "SSH";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
environment.systemPackages = with pkgs; [ openssh ];
|
|
|
|
#environment.shellInit = ''
|
|
# export SSH_AUTH_SOCK="$HOME/.ssh/ssh-agent.sock"
|
|
#'';
|
|
|
|
launchd.user.agents.ssh-agent.serviceConfig = {
|
|
Label = "ssh-agent";
|
|
EnvironmentVariables.SSH_AUTH_SOCK = "/Users/${config.metacfg.user.name}/.ssh/ssh-agent.sock";
|
|
ProgramArguments = [
|
|
"${pkgs.openssh}/bin/ssh-agent"
|
|
"-a"
|
|
"/Users/${config.metacfg.user.name}/.ssh/ssh-agent.sock"
|
|
"-D"
|
|
];
|
|
RunAtLoad = true;
|
|
KeepAlive.SuccessfulExit = true;
|
|
};
|
|
};
|
|
}
|