revert ssh attempt for git
This commit is contained in:
parent
e27a4af6d2
commit
9ae2d1e162
2 changed files with 21 additions and 20 deletions
|
@ -29,7 +29,7 @@
|
|||
"/run/agenix/nix2linode"
|
||||
];
|
||||
nodes.${configuration_name} = {
|
||||
hostname = "100.64.0.4";
|
||||
hostname = "172.234.26.141";
|
||||
profiles.system = {
|
||||
user = "root";
|
||||
path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.${configuration_name};
|
||||
|
|
|
@ -152,28 +152,29 @@
|
|||
'';
|
||||
};
|
||||
|
||||
# this breaks on restart on the server side no idea, can no longer ssh in 22 normally
|
||||
# Convoluted way to get ssh to work for git server while also still allowing
|
||||
# ssh connections to the machine normally (you can't have nginx bind port 22 since sshd does)
|
||||
# but sshd allows us to use a ForceCommand that we cna then proxy through
|
||||
environment.systemPackages = with pkgs; [
|
||||
# NOTE requires nc which I am getting from somewhere.... would be better to put it here in sys packs?
|
||||
(writeScriptBin "proxy-to-git" ''
|
||||
#!${pkgs.bash}/bin/bash
|
||||
nc 100.64.0.2 6611
|
||||
'')
|
||||
];
|
||||
|
||||
# TODO havent gotten this fully working yet
|
||||
|
||||
services.openssh.extraConfig = ''
|
||||
Match Host git.joshuabell.xyz
|
||||
ForceCommand proxy-to-git
|
||||
PermitTTY no
|
||||
X11Forwarding no
|
||||
PermitTunnel no
|
||||
GatewayPorts no
|
||||
AllowAgentForwarding no
|
||||
'';
|
||||
# environment.systemPackages = with pkgs; [
|
||||
# # NOTE requires nc which I am getting from somewhere.... would be better to put it here in sys packs?
|
||||
# (writeScriptBin "proxy-to-git" ''
|
||||
# #!${pkgs.bash}/bin/bash
|
||||
# nc 100.64.0.2 6611
|
||||
# '')
|
||||
# ];
|
||||
#
|
||||
# # TODO havent gotten this fully working yet
|
||||
#
|
||||
# services.openssh.extraConfig = ''
|
||||
# Match Host git.joshuabell.xyz
|
||||
# ForceCommand proxy-to-git
|
||||
# PermitTTY no
|
||||
# X11Forwarding no
|
||||
# PermitTunnel no
|
||||
# GatewayPorts no
|
||||
# AllowAgentForwarding no
|
||||
# '';
|
||||
|
||||
networking.firewall.allowedTCPPorts = [
|
||||
80 # web http
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue