Commit ef61248cf6dd

Vincent Demeester <vincent@sbr.pm>
2018-10-07 00:15:08
ssh: update default configuration ๐Ÿ”‘
A tiny bit more secure Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent 31145e3
Changed files (1)
ssh.nix
@@ -4,17 +4,34 @@
   programs.ssh = {
     enable = true;
 
-    controlMaster = "auto";
-    controlPath = "/tmp/ssh-%u-%l-%r@%h:%p";
-    controlPersist = "360";
-
-    forwardAgent = true;
     serverAliveInterval = 60;
-    
     hashKnownHosts = true;
     userKnownHostsFile = "~/.config/ssh/known_hosts";
-
+    controlPath = "~/.ssh/sockets/%u-%l-%r@%h:%p";
+    
     matchBlocks = rec {
+      "github.com" = {
+        hostname = "github.com";
+        user = "git";
+        extraOptions = {
+          controlMaster = "auto";
+          controlPersist = "360";
+        };
+      };
+      "gitlab.com" = {
+        hostname = "gitlab.com";
+        user = "git";
+        extraOptions = {
+          controlMaster = "auto";
+          controlPersist = "360";
+        };
+      };
+      "*.local" = {
+        extraOptions = {
+          controlMaster = "auto";
+          controlPersist = "360";
+        };
+      };
       hokkaido-remote = {
         proxyCommand = "${pkgs.openssh}/bin/ssh -q p.sbr.pm nc localhost 2223";
         user = "vincent";