ssh: ordre de paramétrage du client SSH

Makefile

@@ -1,6 +1,9 @@
 GSF=git submodule foreach
 TIME=time
 
+CHRONY_STATUS=chronyc tracking
+CHRONY_STATS=chronyc sources -v
+
 all: rebuild-switch
 	date
 ##--------- Commandes spécifiques pour NixOS
@@ -39,6 +42,11 @@ show-diff-with-current:
 show-roots:
 	nix-store --gc --print-roots
 
+show-time:
+	-@$(CHRONY_STATUS)
+	#CHRONY_STATUS='chronyc tracking' CHRONY_STATS='chronyc sources -v' ${CHRONY_STATS} && watch -d -n 20 "${CHRONY_STATUS} && echo "--" && ${CHRONY_STATS}"
+	-@watch -d -n 20 "$(CHRONY_STATUS) && echo "--" && $(CHRONY_STATS)"
+
 store-repair:
 	$(TIME) nix-store --verify --check-contents --repair
 

applications/terminal/developpement.nix

@@ -11,6 +11,11 @@ mkIf flags.developpement {
 
   # Paquets
   environment.systemPackages = with pkgs; [
+    # Build / outil de construction
+    autobuild
+    autoconf
+    automake
+
     # Base de données
     pg_top                 # monitoring de PostgreSQL
     sqlite                 # le moteur de base de données

configuration/environment.nix

@@ -60,7 +60,7 @@ in
     # Host keys the client accepts - order here is honored by OpenSSH
     HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,ssh-rsa,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256
 
-    KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp256,ecdh-sha2-nistp384,diffie-hellman-group-exchange-sha256
+    KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256
     MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
     Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
   '';

options.nix

@@ -77,6 +77,11 @@ let
 
       tinc = {
         enable = mkEnableOption "Enable tinc service";
+        dnsFQDN = mkOption {
+          example = "device.example.net.";
+          description = "DNS name of host pointing to tunnel IP.";
+          type = lib.types.string;
+        };
         connectToAddress = mkOption {
           default = "";
           example = "192.168.1.1";