This repository has no description
694 B
31 lines
1{ config, pkgs, ... }:
2{
3 services.tor = {
4 enable = true;
5 relay.onionServices.ssh = {
6 version = 3;
7 map = [{
8 port = 22;
9 target.port = 22;
10 }];
11 secretKey = "${config.krebs.secret.directory}/ssh-tor.priv";
12 };
13 controlSocket.enable = true;
14 client.enable = true;
15 };
16
17 clanCore.facts.services.tor-ssh = {
18 secret."ssh-tor.priv" = { };
19 secret."tor-hostname" = { };
20 generator.path = with pkgs; [
21 coreutils
22 mkp224o
23 ];
24 generator.script = ''
25 mkp224o-donna lass -n 1 -d . -q -O addr
26 mv "$(cat addr)"/hs_ed25519_secret_key "$secrets"/ssh-tor.priv
27 mv addr "$secrets"/tor-hostname
28 '';
29 };
30}
31