Commit c5f99d12eda4

Vincent Demeester <vincent@sbr.pm>
2026-01-12 16:26:35
fix(ssh): disable agent forwarding for .home and .vpn hosts
- Change forwardAgent from true to false in sshConfig - Prevents agent forwarding issues when connecting between hosts - More secure default for internal network connections
main
1 parent 67eff98
Changed files (1)
lib
functions.nix
lib/functions.nix
@@ -154,7 +154,7 @@ let
                 builtins.head machine.net.ips
               else
                 x;
-            forwardAgent = true;
+            forwardAgent = false;
             # Disable IdentityAgent only for aomi.home (prevents yubikey prompts in TRAMP)
             extraOptions = lib.optionalAttrs (x == "aomi.home") {
               IdentityAgent = "none";