home/programs/security/sapi.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

{ pkgs, ... }:
{
  home.packages = with pkgs; [
    sapi
  ];

  # the configuration for sapi is generated when we run `sapi jump`,
  # there's no need to manage it with nix.
  programs.ssh.includes = [ "config_sapi" ];

  programs.fish.shellAbbrs = {
    "sjump-st1-snc2" = "${pkgs.sapi}/bin/sapi jump sitetest1-snc2";
    "sjump-st1-snc3" = "${pkgs.sapi}/bin/sapi jump sitetest3-snc2";
    "sjump-st2-snc2" = "${pkgs.sapi}/bin/sapi jump sitetest2-snc2";
    "sjump-st3" = "${pkgs.sapi}/bin/sapi jump sitetest3";
    "sjump" = "${pkgs.sapi}/bin/sapi jump";
    "ssh-edge" =
      "${pkgs.kitty}/bin/kitten ssh -o StrictHostKeyChecking=no -o IdentitiesOnly=yes -J chi1-jumpcontainer-es -i (${pkgs._1password-cli}/bin/op read 'op://Infra-Compute-Edge-rks/ice_ssh-private-key/ice_rsa'|psub)";
  };
}