From 3227363b37f9a8225331d8feaf8e993ddf9ffefc Mon Sep 17 00:00:00 2001 From: Antoine Martin Date: Tue, 15 Nov 2022 00:36:30 +0100 Subject: [PATCH] home: ssh: setup gpg ssh agent socket forwarding --- home/ssh.nix | 21 +++++++++++++++++---- 1 file changed, 17 insertions(+), 4 deletions(-) diff --git a/home/ssh.nix b/home/ssh.nix index 4b65ea9..3f80b3b 100644 --- a/home/ssh.nix +++ b/home/ssh.nix @@ -19,10 +19,23 @@ in { programs.ssh = { enable = true; - matchBlocks = { - boreal = {hostname = "boreal.alarsyo.net";}; - poseidon = {hostname = "poseidon.alarsyo.net";}; - pi = { + matchBlocks = let + addGPGAgentForwarding = hostConf: + { + remoteForwards = [ + { + # shhhh this is a path but it works + bind.address = "/run/user/1000/gnupg/S.gpg-agent.ssh"; + host.address = "/run/user/1000/gnupg/S.gpg-agent.ssh"; + } + ]; + } + // hostConf; + in { + boreal = addGPGAgentForwarding {hostname = "boreal.alarsyo.net";}; + hades = addGPGAgentForwarding {hostname = "hades.alarsyo.net";}; + poseidon = addGPGAgentForwarding {hostname = "poseidon.alarsyo.net";}; + pi = addGPGAgentForwarding { hostname = "pi.alarsyo.net"; user = "pi"; };