artemist/nixos-config
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Add extra known hosts

Browse source
This commit is contained in:
Artemis Tosini 2021-09-18 17:08:41 +00:00
parent 56c7d5cede
commit 969a637c8b
Signed by: artemist
GPG key ID: ADFFE553DCBB831E
3 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
home/default.nix
View file

@ -14,7 +14,7 @@
./mpv.nix ./mpv.nix
./kitty.nix ./kitty.nix
./neovim ./neovim
./ssh.nix ./ssh
]; ];
services.syncthing.enable = true; services.syncthing.enable = true;

2
home/ssh.nix → home/ssh/default.nix
View file

@ -8,8 +8,8 @@
controlMaster = "auto"; controlMaster = "auto";
controlPersist = "10m"; controlPersist = "10m";
controlPath = "~/.ssh/c/%r@%n:%p"; controlPath = "~/.ssh/c/%r@%n:%p";
hashKnownHosts = true;
# We have to do this as text to gaurantee it's part of the last Host * block # We have to do this as text to gaurantee it's part of the last Host * block
userKnownHostsFile = "~/.ssh/known_hosts ${./extra_known_hosts}";
extraConfig = '' extraConfig = ''
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256 HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256 KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256

2
home/ssh/extra_known_hosts Normal file
View file

@ -0,0 +1,2 @@
@cert-authority manehattan.artem.ist,*.manehattan.artem.ist sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBLNmn6dU6QucvxYB1Os6t9FtR7h/kJGIcJdUZLv5iXuLKCwqtKY/GEDCDDmwk0kkmlggEDoLSsTHNDo9ZLjvI0sAAAAbc3NoOmNhQG1hbmVoYXR0YW4uYXJ0ZW0uaXN0 ca@manehattan.artem.ist
github.com,192.30.253.112 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==