Infinidoge/universe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

modules: restructure modules directory

Browse source
This commit is contained in:
Infinidoge 2021-11-17 23:32:06 -05:00
parent 8a68337380
commit 19ecc15b59
6 changed files with 222 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

70
modules/ssh-tunnel.nix
View file

@ -1,70 +0,0 @@
{ config, lib, pkgs, ... }:
with lib;
let
cfg = config.services.ssh-tunnel;
in
{
options.services.ssh-tunnel = {
enable = mkEnableOption "SSH tunneling service";
server = mkOption {
type = with types; uniq string;
default = null;
description = "The SSH server to connect for port forwarding";
};
requiredBy = mkOption {
type = with types; listOf string;
default = [ ];
description = "List of systemd services that require the SSH tunnels";
};
forwards = mkOption {
type = types.submodule {
options = {
dynamic = mkOption {
type = with types; listOf (either int string);
default = [ ];
description = "List of dynamic ports to open through the ssh tunnel. See ssh(1) for ``-D``";
};
local = mkOption {
type = with types; listOf (either int string);
default = [ ];
description = "List of local ports to open through the ssh tunnel. See ssh(1) for ``-L``";
};
remote = mkOption {
type = with types; listOf (either int string);
default = [ ];
description = "List of remote ports to open through the ssh tunnel. See ssh(1) for ``-R``";
};
};
};
};
};
config.systemd.services.ssh-tunnel = mkIf cfg.enable (
let
mkParams = flag: concatMapStringsSep " " (x: "${flag} ${toString x}");
dynamic = mkParams "-D" cfg.forwards.dynamic;
local = mkParams "-L" cfg.forwards.local;
remote = mkParams "-R" cfg.forwards.remote;
options = mkParams "-o" (mapAttrsToList (n: v: "${n}=${toString v}") {
ServerAliveInterval = 60;
ExitOnForwardFailure = "yes";
KbdInteractiveAuthentication = "no";
});
in
{
script = ''
${pkgs.openssh}/bin/ssh ${cfg.server} -NTn ${options} ${dynamic} ${local} ${remote}
'';
requiredBy = cfg.requiredBy;
serviceConfig = {
RestartSec = 5;
Restart = "always";
};
}
);
}