This repository has no description
714 B
32 lines
1{ config, pkgs, ... }:
2{
3 services.tor = {
4 enable = true;
5 relay.onionServices.ssh = {
6 version = 3;
7 map = [
8 {
9 port = 22;
10 target.port = 22;
11 }
12 ];
13 secretKey = "${config.krebs.secret.directory}/ssh-tor.priv";
14 };
15 controlSocket.enable = true;
16 client.enable = true;
17 };
18
19 clanCore.facts.services.tor-ssh = {
20 secret."ssh-tor.priv" = { };
21 secret."tor-hostname" = { };
22 generator.path = with pkgs; [
23 coreutils
24 mkp224o
25 ];
26 generator.script = ''
27 mkp224o-donna lass -n 1 -d . -q -O addr
28 mv "$(cat addr)"/hs_ed25519_secret_key "$secrets"/ssh-tor.priv
29 mv addr "$secrets"/tor-hostname
30 '';
31 };
32}