Merge pull request #26605 from mayflower/disable-ssh-agent

ssh module: disable agent by default

Changed files
+10 -1
nixos
doc
manual
release-notes
modules
programs
+9
nixos/doc/manual/release-notes/rl-1709.xml
···
<literal>dataDir</literal>.
</para>
</listitem>
</itemizedlist>
···
<literal>dataDir</literal>.
</para>
</listitem>
+
<listitem>
+
<para>
+
The <literal>ssh-agent</literal> user service is not started by default
+
anymore. Use <literal>programs.ssh.startAgent</literal> to enable it if
+
needed. There is also a new <literal>programs.gnupg.agent</literal>
+
module that creates a <literal>gpg-agent</literal> user service. It can
+
also serve as a SSH agent if <literal>enableSSHSupport</literal> is set.
+
</para>
+
</listitem>
</itemizedlist>
+1 -1
nixos/modules/programs/ssh.nix
···
startAgent = mkOption {
type = types.bool;
-
default = true;
description = ''
Whether to start the OpenSSH agent when you log in. The OpenSSH agent
remembers private keys for you so that you don't have to type in
···
startAgent = mkOption {
type = types.bool;
+
default = false;
description = ''
Whether to start the OpenSSH agent when you log in. The OpenSSH agent
remembers private keys for you so that you don't have to type in