forked from rarias/jungle
Rodrigo Arias Mallo
2bb366b9ac
The agenix tools needs to read the secrets from a standalone file, but we also need the same information for the SSH keys.
23 lines
728 B
Nix
23 lines
728 B
Nix
{ lib, ... }:
|
|
|
|
let
|
|
keys = import ../../keys.nix;
|
|
hostsKeys = lib.mapAttrs (name: value: { publicKey = value; }) keys.hosts;
|
|
in
|
|
{
|
|
# Enable the OpenSSH daemon.
|
|
services.openssh.enable = true;
|
|
|
|
# Connect to intranet git hosts via proxy
|
|
programs.ssh.extraConfig = ''
|
|
Host bscpm02.bsc.es bscpm03.bsc.es gitlab-internal.bsc.es alya.gitlab.bsc.es
|
|
User git
|
|
ProxyCommand nc -X connect -x localhost:23080 %h %p
|
|
'';
|
|
|
|
programs.ssh.knownHosts = hostsKeys // {
|
|
"gitlab-internal.bsc.es".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF9arsAOSRB06hdy71oTvJHG2Mg8zfebADxpvc37lZo3";
|
|
"bscpm03.bsc.es".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM2NuSUPsEhqz1j5b4Gqd+MWFnRqyqY57+xMvBUqHYUS";
|
|
};
|
|
}
|