From 16bda4739c3b95d66719f2390f7cbad37dd5af04 Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Mon, 5 Jan 2026 18:33:41 -0800 Subject: simplify ssh configuration --- home/programs/ssh.nix | 36 ++++++++---------------------------- 1 file changed, 8 insertions(+), 28 deletions(-) (limited to 'home/programs/ssh.nix') diff --git a/home/programs/ssh.nix b/home/programs/ssh.nix index 77c4897..efc3085 100644 --- a/home/programs/ssh.nix +++ b/home/programs/ssh.nix @@ -5,60 +5,40 @@ enableDefaultConfig = false; matchBlocks = { "*" = { - forwardAgent = true; - serverAliveInterval = 60; - controlPersist = "30m"; - controlPath = "${config.home.homeDirectory}/.ssh/sockets/S.%r@%h:%p"; controlMaster = "auto"; + controlPath = "${config.home.homeDirectory}/.ssh/sockets/S.%r@%h:%p"; + controlPersist = "30m"; + forwardAgent = false; + identitiesOnly = true; + identityAgent = "none"; + identityFile = "${config.home.homeDirectory}/.ssh/id_ed25519_sk_rk"; + serverAliveInterval = 60; }; - "rivendell" = { + "riv" = { hostname = "192.168.1.114"; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; }; "riv-unlock" = { hostname = "192.168.1.114"; user = "root"; port = 911; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; }; "nas" = { hostname = "192.168.1.68"; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; }; "nnas" = { hostname = "192.168.1.68"; user = "nas"; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; }; "bree" = { hostname = "192.168.1.50"; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; }; "argonath" = { hostname = "fcuny.net"; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; }; "github.com" = { hostname = "github.com"; user = "git"; - forwardAgent = false; - identityAgent = "none"; - identitiesOnly = true; - identityFile = "~/.ssh/id_ed25519_sk_rk"; extraOptions = { - preferredAuthentications = "publickey"; controlMaster = "no"; controlPath = "none"; }; -- cgit v1.2.3