config/services/sshproxy/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ config, pkgs, ... }:
{
  users.users.sshjump = {
    shell = "${pkgs.coreutils}/bin/true";
    isSystemUser = true;
    group = "sshjump";
    openssh.authorizedKeys.keys = with config.personal.lib.publicKeys.ssh; [
      latitude-7490
      precision-3571
      dragonfly-g4
    ];
  };

  users.groups.sshjump = { };

  services.openssh.extraConfig = ''
    Match user sshjump
      AllowTcpForwarding yes
      AllowAgentForwarding yes
  '';
}