config/services/sshproxy/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

{ config, pkgs, ... }:
{
  users.users.sshjump = {
    shell = "${pkgs.coreutils}/bin/true";
    isSystemUser = true;
    group = "sshjump";
    openssh.authorizedKeys.keys = with config.personal.lib.publicKeys.ssh; [
      latitude-7490
      precision-3571
      dragonfly-g4
      optiplex-9030
    ];
  };

  users.groups.sshjump = { };

  services.openssh.extraConfig = ''
    Match user sshjump
      AllowTcpForwarding yes
      AllowAgentForwarding yes
      PasswordAuthentication no
      PermitTunnel no
      GatewayPorts no
      PermitTTY no
      X11Forwarding no
  '';
}