nix/8.nix-darwin
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(services.openssh): add extraConfig option

Browse source 
Same interface as in NixOS: https://search.nixos.org/options?channel=unstable&show=services.openssh.extraConfig&from=0&size=50&sort=relevance&type=packages&query=services.openssh.extraConfig
This is useful to customize the behavior of the SSH daemon, e.g. to add
options like `StreamLocalBindUnlink yes` to improve gpg-agent
forwarding.

Signed-off-by: squat <lserven@gmail.com>
This commit is contained in:
squat 2025-05-22 20:22:47 +02:00
parent e2676937fa
commit e09c1aefe4
No known key found for this signature in database
GPG key ID: 586FEAF680DA74AD
1 changed files with 20 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

27
modules/services/openssh.nix
View file

@ -5,14 +5,25 @@ let
in
{
options = {
services.openssh.enable = lib.mkOption {
type = lib.types.nullOr lib.types.bool;
default = null;
description = ''
Whether to enable Apple's built-in OpenSSH server.
services.openssh = {
enable = lib.mkOption {
type = lib.types.nullOr lib.types.bool;
default = null;
description = ''
Whether to enable Apple's built-in OpenSSH server.
The default is null which means let macOS manage the OpenSSH server.
'';
The default is null which means let macOS manage the OpenSSH server.
'';
};
extraConfig = lib.mkOption {
type = lib.types.lines;
default = "";
description = ''
Extra configuration text loaded in {file}`sshd_config`.
See {manpage}`sshd_config(5)` for help.
'';
};
};
};
@ -29,5 +40,7 @@ in
launchctl disable system/com.openssh.sshd
fi
'');
environment.etc."ssh/sshd_config.d/100-nix-darwin.conf".text = cfg.extraConfig;
};
}