path: root/home/programs/ssh.nix

{
  config,
  lib,
  pkgs,
  ...
}:
{
  programs.ssh = {
    enable = true;
    enableDefaultConfig = false;
    matchBlocks = {
      "*.coder" = {
        proxyCommand = "${lib.getExe pkgs.coder-mainline} --global-config \"/Users/fcuny/Library/Application Support/coderv2\" ssh --stdio %h";
        extraOptions = {
          "ConnectTimeout" = "0";
          "StrictHostKeyChecking" = "no";
          "UserKnownHostsFile" = "/dev/null";
          "LogLevel" = "ERROR";
          # Disable ControlMaster for Coder to avoid "stuck" tunnels if a workspace restarts.
          "ControlMaster" = "no";
          "ControlPath" = "none";
        };
      };
      "*" = {
        controlMaster = "auto";
        controlPath = "${config.home.homeDirectory}/.ssh/sockets/S.%r@%h:%p";
        controlPersist = "30m";
        forwardAgent = false;
        identitiesOnly = true;
        identityAgent = "none";
        identityFile = "${config.home.homeDirectory}/.ssh/id_ed25519_sk_rk";
        serverAliveInterval = 60;
      };
      "riv" = {
        hostname = "192.168.1.114";
      };
      "riv-unlock" = {
        hostname = "192.168.1.114";
        user = "root";
        port = 911;
      };
      "nas" = {
        hostname = "192.168.1.68";
      };
      "nnas" = {
        hostname = "192.168.1.68";
        user = "nas";
      };
      "bree" = {
        hostname = "192.168.1.50";
      };
      "argonath" = {
        hostname = "fcuny.net";
      };
      "github.com" = {
        hostname = "github.com";
        user = "git";
        extraOptions = {
          controlMaster = "no";
          controlPath = "none";
        };
      };
    };
  };

  home.file = {
    # we need this path to be created so that the control path can be used.
    ".ssh/sockets/.keep".text = "# Managed by Home Manager";
  };
}