diff options
| -rw-r--r-- | accounts/gkleen@sif/default.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/accounts/gkleen@sif/default.nix b/accounts/gkleen@sif/default.nix index 14e2c9a7..b9a9abe1 100644 --- a/accounts/gkleen@sif/default.nix +++ b/accounts/gkleen@sif/default.nix | |||
| @@ -102,6 +102,10 @@ in { | |||
| 102 | ConnectTimeout 30 | 102 | ConnectTimeout 30 |
| 103 | PasswordAuthentication yes | 103 | PasswordAuthentication yes |
| 104 | KbdInteractiveAuthentication yes | 104 | KbdInteractiveAuthentication yes |
| 105 | UpdateHostKeys yes | ||
| 106 | GlobalKnownHostsFile ${pkgs.writeText "ssh_known_hosts" '' | ||
| 107 | @cert-authority *.mathinst.loc ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBUTFpVCdETCXiDSDl7YGbR1J4BLTsoBzjDtflHJGO/z ssh-pki@mgmt01 | ||
| 108 | ''} | ||
| 105 | 109 | ||
| 106 | Match host *.mathinst.loc !host mathw0g.mathinst.loc !exec "nc -z -w 1 %h %p &>/dev/null" | 110 | Match host *.mathinst.loc !host mathw0g.mathinst.loc !exec "nc -z -w 1 %h %p &>/dev/null" |
| 107 | # ProxyCommand ${pkgs.socat}/bin/socat - SOCKS4A:127.0.0.1:%h:%p,socksport=8118 | 111 | # ProxyCommand ${pkgs.socat}/bin/socat - SOCKS4A:127.0.0.1:%h:%p,socksport=8118 |