From a6ec22808c3cf893fdf07f08d0529aace9480664 Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Sun, 29 May 2022 13:49:18 +0200
Subject: l: add tor-ssh.nix

---
 lass/2configs/default.nix |  1 +
 lass/2configs/tor-ssh.nix | 14 ++++++++++++++
 2 files changed, 15 insertions(+)
 create mode 100644 lass/2configs/tor-ssh.nix

diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix
index f03d8b56..01a40952 100644
--- a/lass/2configs/default.nix
+++ b/lass/2configs/default.nix
@@ -10,6 +10,7 @@ with import <stockholm/lib>;
     ./htop.nix
     <stockholm/krebs/2configs/security-workarounds.nix>
     ./wiregrill.nix
+    ./tor-ssh.nix
     {
       users.extraUsers =
         mapAttrs (_: h: { hashedPassword = h; })
diff --git a/lass/2configs/tor-ssh.nix b/lass/2configs/tor-ssh.nix
new file mode 100644
index 00000000..8b36733e
--- /dev/null
+++ b/lass/2configs/tor-ssh.nix
@@ -0,0 +1,14 @@
+{
+  services.tor = {
+    enable = true;
+    relay.onionServices.ssh = {
+      version = 3;
+      map = [{
+        port = 22;
+        target.port = 22;
+      }];
+      secretKey = <secrets/ssh-tor.priv>;
+    };
+  };
+}
+
-- 
cgit v1.2.3