hosts/losurdo/ssh.nix

   1 { pkgs, lib, config, hosts, ... }:
   2 {
   3   systemd.services.ssh-mermet-reverse = {
   4     after = [ "network-online.target" ];
   5     wantedBy = [ "multi-user.target" ];
   6     serviceConfig = {
   7       Type = "simple";
   8       # Require services.openssh.gatewayPorts = "clientspecified";
   9       # on the target.
  10       ExecStart = ''${pkgs.openssh}/bin/ssh -v -g -N -T \
  11       -o ServerAliveInterval=10 \
  12       -o ExitOnForwardFailure=yes \
  13       -R *:10022:localhost:22 \
  14       ${hosts.mermet._module.args.ipv4}
  15     '';
  16       Restart = "always";
  17       RestartSec = "5s";
  18     };
  19   };
  20   boot.initrd.network.ssh = {
  21     enable = true;
  22     port = 2222;
  23     authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
  24     hostKeys = [ "/root/initrd/ssh.key" ];
  25     extraConfig = ''
  26   '';
  27   };
  28   services.openssh = {
  29     openFirewall = true;
  30     forwardX11 = true;
  31   };
  32   programs.ssh = {
  33     extraConfig = ''
  34       Compression = yes
  35     '';
  36   };
  37   services.upnpc.enable = true;
  38   services.upnpc.redirections =
  39     [
  40       {
  41         description = "SSH";
  42         externalPort = 22;
  43         protocol = "TCP";
  44         duration = 30 * 60;
  45         service.wantedBy = [ "sshd.service" ];
  46         service.partOf = [ "sshd.service" ];
  47       }
  48       { description = "Mosh"; externalPort = 60000; protocol = "UDP"; duration = 30 * 60; service.wantedBy = [ "sshd.service" ]; }
  49       { description = "Mosh"; externalPort = 60001; protocol = "UDP"; duration = 30 * 60; service.wantedBy = [ "sshd.service" ]; }
  50       { description = "Mosh"; externalPort = 60002; protocol = "UDP"; duration = 30 * 60; service.wantedBy = [ "sshd.service" ]; }
  51       { description = "Mosh"; externalPort = 60003; protocol = "UDP"; duration = 30 * 60; service.wantedBy = [ "sshd.service" ]; }
  52     ] ++ [
  53       {
  54         description = "SSH (boot)";
  55         externalPort = 2222;
  56         protocol = "TCP";
  57         duration = 0;
  58         service.wantedBy = [ "sshd.service" ];
  59       }
  60     ];
  61 }