87 lines
2.7 KiB
Nix
87 lines
2.7 KiB
Nix
{ config, lib, ... }:
|
|
with lib;
|
|
let
|
|
cfg = config.krebs;
|
|
|
|
out = {
|
|
config = lib.mkIf cfg.enable imp;
|
|
};
|
|
|
|
imp = lib.mkMerge [
|
|
{
|
|
services.openssh.hostKeys =
|
|
let inherit (config.krebs.build.host.ssh) privkey; in
|
|
mkIf (privkey != null) [privkey];
|
|
|
|
services.openssh.knownHosts =
|
|
filterAttrs
|
|
(knownHostName: knownHost:
|
|
knownHost.publicKey != null &&
|
|
knownHost.hostNames != []
|
|
)
|
|
(mapAttrs
|
|
(hostName: host: {
|
|
hostNames =
|
|
concatLists
|
|
(mapAttrsToList
|
|
(netName: net:
|
|
let
|
|
aliases =
|
|
concatLists [
|
|
shortAliases
|
|
net.aliases
|
|
net.addrs
|
|
];
|
|
shortAliases =
|
|
optionals
|
|
(cfg.dns.search-domain != null)
|
|
(map (removeSuffix ".${cfg.dns.search-domain}")
|
|
(filter (hasSuffix ".${cfg.dns.search-domain}")
|
|
net.aliases));
|
|
addPort = alias:
|
|
if net.ssh.port != 22
|
|
then "[${alias}]:${toString net.ssh.port}"
|
|
else alias;
|
|
in
|
|
map addPort aliases
|
|
)
|
|
host.nets);
|
|
publicKey = host.ssh.pubkey;
|
|
})
|
|
(foldl' mergeAttrs {} [
|
|
cfg.hosts
|
|
{
|
|
localhost = {
|
|
nets.local = {
|
|
addrs = [ "127.0.0.1" "::1" ];
|
|
aliases = [ "localhost" ];
|
|
ssh.port = 22;
|
|
};
|
|
ssh.pubkey = config.krebs.build.host.ssh.pubkey;
|
|
};
|
|
}
|
|
]));
|
|
|
|
programs.ssh.extraConfig = concatMapStrings
|
|
(net: ''
|
|
Host ${toString (net.aliases ++ net.addrs)}
|
|
Port ${toString net.ssh.port}
|
|
'')
|
|
(filter
|
|
(net: net.ssh.port != 22)
|
|
(concatMap (host: attrValues host.nets)
|
|
(mapAttrsToList
|
|
(_: host: recursiveUpdate host
|
|
(optionalAttrs (cfg.dns.search-domain != null &&
|
|
hasAttr cfg.dns.search-domain host.nets) {
|
|
nets."" = host.nets.${cfg.dns.search-domain} // {
|
|
aliases = [host.name];
|
|
addrs = [];
|
|
};
|
|
}))
|
|
config.krebs.hosts)));
|
|
}
|
|
];
|
|
|
|
in out
|