schmittlauch/nixconfigs
2
0
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity

workmac/ssh: only enable multiplexing for jump hosts

Browse source 
otherwise reboot checks for remote machines were stuck waiting for the
jump host socket.

quick fix, could be nicer, introduces code duplication
This commit is contained in:
Trolli Schmittlauch 2025-09-04 14:42:39 +02:00
parent c2eaf4418a
commit e0e455721f
1 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
home/workmac.nix
View file

@ -35,12 +35,8 @@ in
enable = true;
# defaults in bottom match block "*"
# TODO: common config for desktop as well
# multiplexer, e.g. to avoid rate limiting on jumphost usage
serverAliveInterval = 10;
serverAliveCountMax = 2; # 2 strikes and you're out
controlMaster = "auto";
# not too long, due to the frequent keepalives
controlPersist = "1h";
# ssh host config
matchBlocks = {
@ -60,14 +56,21 @@ in
extraOptions = {
LogLevel = "Verbose";
AddressFamily = "inet";
ControlMaster = "auto";
# not too long, due to the frequent keepalives
ControlPersist = "1h";
};
};
"fcio-rzob-jump" = lib.hm.dag.entryAfter [ "*" ] {
# multiplexer, e.g. to avoid rate limiting on jumphost usage
hostname = "vpn-rzob.services.fcio.net";
extraOptions = {
LogLevel = "Verbose";
AddressFamily = "inet";
ControlMaster = "auto";
# not too long, due to the frequent keepalives
ControlPersist = "1h";
};
};