Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

services.ssh-agent.enable

Whether to enable OpenSSH private key agent.

Type: boolean

Default:

false

Example:

true

Declared by:

services.ssh-agent.package

The openssh package to use.

Type: package

Default:

pkgs.openssh

Declared by:

services.ssh-agent.defaultMaximumIdentityLifetime

Set a default value for the maximum lifetime in seconds of identities added to the agent.

Type: null or (positive integer, meaning >0)

Default:

null

Example:

3600

Declared by:

services.ssh-agent.pkcs11Whitelist

Specify a list of approved path patterns for PKCS#11 and FIDO authenticator middleware libraries. When using the -s or -S options with ssh-add(1), only libraries matching these patterns will be accepted.

See ssh-agent(1).

Type: list of string

Default:

[ ]

Example:

[ "${pkgs.tpm2-pkcs11}/lib/*" ]

Declared by:

services.ssh-agent.socket

The agent’s socket; interpreted as a suffix to $XDG_RUNTIME_DIR on Linux and $(getconf DARWIN_USER_TEMP_DIR) on macOS.

Type: string

Default:

"ssh-agent"

Example:

"ssh-agent/socket"

Declared by: