all repos — nixfiles @ 0b5e7df6feebf151ff757b37d96d538fb1f872b9

System and user configuration, managed by nix and home-manager

user/settings/ssh.nix (view raw)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
{
  pkgs,
  ...
}:
let
  data = import ../../data;
in
{
  programs.ssh = {
    enable = true;
    enableDefaultConfig = false;
    settings."*" = {
      Compression = true;
      ControlMaster = "auto";
      ControlPersist = "10m";
      ServerAliveInterval = 15;
      SendEnv = "TERM_PROGRAM";
      VerifyHostKeyDNS = "ask";
      CanonicalizeHostname = "yes";
      CanonicalizeFallbackLocal = "no";
      CanonicalizeMaxDots = 0;
      CanonicalDomains = "${data.homenet} ${data.tailnet}";
      IdentitiesOnly = "yes";
      StrictHostKeyChecking = "yes";
    };
    includes = [
      "local.ssh_config"
    ];
  };
  home.shellAliases = {
    essh = "ssh -o StrictHostKeyChecking=no -o GlobalKnownHostsFile=/dev/null -o UserKnownHostsFile=/dev/null";
  };

  home.packages = [
    pkgs.mosh
  ];
}