geoffrey/dotfiles
geoffrey/dotfiles
1
0
Fork 0
Code Issues 8 Pull requests Releases Activity

Port common SSH config from extension

Browse source
This commit is contained in:
Geoffrey Frogeye 2023-12-02 17:37:34 +01:00
parent cc13cabad5
commit e01c454d68
Signed by: geoffrey
GPG key ID: C72403E7F82E6AD8
2 changed files with 26 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
hm/common.nix
View file

@ -274,8 +274,8 @@ in
".mypy_cache"
];
lfs.enable = true;
userEmail = "geoffrey@frogeye.fr";
userName = "Geoffrey “Frogeye” Preud'homme";
userEmail = lib.mkDefault "geoffrey@frogeye.fr";
userName = lib.mkDefault "Geoffrey Frogeye";
extraConfig = {
core = {
editor = "nvim";

24
hm/ssh.nix Normal file
View file

@ -0,0 +1,24 @@
{ ... }:
{
config = {
programs.ssh = {
enable = true;
controlMaster = "auto";
controlPersist = "60s"; # TODO Default is 10minutes... makes more sense no?
# Ping the server frequently enough so it doesn't think we left (non-spoofable)
serverAliveInterval = 30;
matchBlocks."*" = {
# Do not forward the agent (-A) to a machine by default,
# as it is kinda a security concern
forwardAgent = false;
# Restrict terminal features (servers don't necessarily have the terminfo for my cutting edge terminal)
sendEnv = [ "!TERM" ];
# TODO Why not TERM=xterm-256color?
extraOptions = {
# Check SSHFP records
VerifyHostKeyDNS = "yes";
};
};
};
};
}