This repository has no description
732 B
33 lines
1{ config, pkgs, ... }:
2{
3 services.tor = {
4 enable = true;
5 relay.onionServices.ssh = {
6 version = 3;
7 map = [
8 {
9 port = 22;
10 target.port = 22;
11 }
12 ];
13 secretKey = "${config.krebs.secret.directory}/ssh-tor.priv";
14 };
15 controlSocket.enable = true;
16 client.enable = true;
17 };
18
19 clanCore.vars.generators.tor-ssh = {
20 files."ssh-tor.priv" = { };
21 files."tor-hostname".deploy = false;
22 migrateFact = "tor-ssh";
23 runtimeInputs = with pkgs; [
24 coreutils
25 mkp224o
26 ];
27 script = ''
28 mkp224o-donna lass -n 1 -d . -q -O addr
29 mv "$(cat addr)"/hs_ed25519_secret_key "$out"/ssh-tor.priv
30 mv addr "$out"/tor-hostname
31 '';
32 };
33}