Some SSH stuff

This commit is contained in:
Geoffrey Frogeye 2025-04-17 15:19:12 +02:00
parent 2ce896491b
commit 534e246cec
Signed by: geoffrey
GPG key ID: C72403E7F82E6AD8
3 changed files with 9 additions and 21 deletions

View file

@ -10,7 +10,7 @@
programs.ssh = {
enable = true;
controlMaster = "auto";
controlPersist = "60s"; # TODO Default is 10minutes... makes more sense no?
controlPersist = "60s"; # Enough to cache Ansible stuff, not too long so I don't have remember which shenanigans I did with my last connection
# Ping the server frequently enough so it doesn't think we left (non-spoofable)
serverAliveInterval = 30;
matchBlocks."*" = {
@ -18,8 +18,7 @@
# as it is kinda a security concern
forwardAgent = false;
# Restrict terminal features (servers don't necessarily have the terminfo for my cutting edge terminal)
sendEnv = [ "!TERM" ];
# TODO Why not TERM=xterm-256color?
setEnv = [ "TERM=xterm-256color" ];
extraOptions = {
# Check SSHFP records
VerifyHostKeyDNS = "yes";