[macbook] SSH updates.

home-modules/secretive.nix

@@ -1,9 +1,10 @@
 { user, ... } : {
   programs.ssh = {
     enable = true;
-    extraConfig = ''
+    matchBlocks = {
-Host *
+      "*" = {
-  IdentityAgent ${user.homeDirectory}/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/socket.ssh
+        identityAgent = "${user.homeDirectory}/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/socket.ssh";
-    '';
+      };
+    };
   };
 }

hosts/common/keys/id_secretive.pub

@@ -1 +1 @@
-ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCLJj/fefApUkXp79YPPk1O2L6CW6kqISXSWWmR8+MX0wk3lQv1NUp1p87sE57i6aUcYMuba0U9y+ppQq603uOc= code@secretive.Mariano’s-MacBook-Pro-(2).local
+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBLNJvauvfuOq5DUO0pnObq/8De1dW1ZM757sMGVvwLUHm48si4coYozbDISIe58Puc9uMkihvHSjNlZh0vMHoo= git@secretive.Mariano’s-MacBook-Pro-(2).local

hosts/macbook/home.nix

@@ -84,10 +84,28 @@ in {
   };
 
   programs.ssh = {
+    enableDefaultConfig = false;
     matchBlocks = {
-      media = {
+      "*" = {
+        forwardAgent = false;
+        addKeysToAgent = "no";
+        compression = false;
+        serverAliveInterval = 0;
+        serverAliveCountMax = 3;
+        hashKnownHosts = false;
+        userKnownHostsFile = "~/.ssh/known_hosts";
+        controlMaster = "no";
+        controlPath = "~/.ssh/master-%r@%n:%p";
+        controlPersist = "no";
+      };
+      homeserver = {
         user = "jmug";
-        hostname = "192.168.8.241";
+        hostname = "100.122.244.59";
+        forwardAgent = true;
+      };
+      devbox = {
+        user = "jmug";
+        hostname = "100.102.140.44";
         forwardAgent = true;
       };
       handmade = {
@@ -95,6 +113,11 @@ in {
         hostname = "82.180.160.149";
         forwardAgent = true;
       };
+      "racknerd" = {
+        user = "jmug";
+        hostname = "155.94.155.137";
+        addKeysToAgent = "yes";
+      };
     };
   };