···

       
38
       
38
       
 
       
      pkgs.nano

     

       
39
       
39
       
 
       
      pkgs.ncurses

     

       
40
       
40
       
 
       
      pkgs.netcat

     

       
41
       
41
       
-
       
      pkgs.openssh

     

       
41
       
41
       
+
       
      config.programs.ssh.package

     

       
42
       
42
       
 
       
      pkgs.perl

     

       
43
       
43
       
 
       
      pkgs.procps

     

       
44
       
44
       
 
       
      pkgs.rsync

     

···

       
57
       
57
       
 
       
      };

     

       
58
       
58
       
 
       


     

       
59
       
59
       
 
       
      packages = mkOption {

     

       
60
       
60
       
-
       
        default = [ pkgs.stdenv pkgs.git pkgs.jdk pkgs.openssh pkgs.nix ];

     

       
60
       
60
       
+
       
        default = [ pkgs.stdenv pkgs.git pkgs.jdk config.programs.ssh.package pkgs.nix ];

     

       
61
       
61
       
 
       
        type = types.listOf types.package;

     

       
62
       
62
       
 
       
        description = ''

     

       
63
       
63
       
 
       
          Packages to add to PATH for the jenkins process.

     

···

       
75
       
75
       
 
       
      serviceConfig.Type = "oneshot";

     

       
76
       
76
       
 
       
      serviceConfig.RemainAfterExit = true;

     

       
77
       
77
       
 
       


     

       
78
       
78
       
-
       
      path = [ pkgs.gitolite pkgs.git pkgs.perl pkgs.bash pkgs.openssh ];

     

       
78
       
78
       
+
       
      path = [ pkgs.gitolite pkgs.git pkgs.perl pkgs.bash config.programs.ssh.package ];

     

       
79
       
79
       
 
       
      script = ''

     

       
80
       
80
       
 
       
        cd ${cfg.dataDir}

     

       
81
       
81
       
 
       
        mkdir -p .gitolite/logs

     

···

       
345
       
345
       
 
       
    systemd.sockets.nix-daemon.wantedBy = [ "sockets.target" ];

     

       
346
       
346
       
 
       


     

       
347
       
347
       
 
       
    systemd.services.nix-daemon =

     

       
348
       
348
       
-
       
      { path = [ nix pkgs.openssl pkgs.utillinux pkgs.openssh ]

     

       
348
       
348
       
+
       
      { path = [ nix pkgs.openssl pkgs.utillinux config.programs.ssh.package ]

     

       
349
       
349
       
 
       
          ++ optionals cfg.distributedBuilds [ pkgs.gzip ];

     

       
350
       
350
       
 
       


     

       
351
       
351
       
 
       
        environment = cfg.envVars

     

···

       
91
       
91
       
 
       
            # can obtain it securely by parsing the output of

     

       
92
       
92
       
 
       
            # ec2-get-console-output.

     

       
93
       
93
       
 
       
            echo "-----BEGIN SSH HOST KEY FINGERPRINTS-----" > /dev/console

     

       
94
       
94
       
-
       
            ${pkgs.openssh}/bin/ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub > /dev/console

     

       
94
       
94
       
+
       
            ${config.programs.ssh.package}/bin/ssh-keygen -l -f /etc/ssh/ssh_host_dsa_key.pub > /dev/console

     

       
95
       
95
       
 
       
            echo "-----END SSH HOST KEY FINGERPRINTS-----" > /dev/console

     

       
96
       
96
       
 
       
          '';

     

       
97
       
97
       
 
       
        serviceConfig.Type = "oneshot";

     

···

       
100
       
100
       
 
       


     

       
101
       
101
       
 
       
        # `openssl' is required to generate the CA.  `openssh' is

     

       
102
       
102
       
 
       
        # required to generate key pairs.

     

       
103
       
103
       
-
       
        path = [ pkgs.openssl pkgs.openssh pkgs.bash ];

     

       
103
       
103
       
+
       
        path = [ pkgs.openssl config.programs.ssh.package pkgs.bash ];

     

       
104
       
104
       
 
       


     

       
105
       
105
       
 
       
        respawn = false;

     

       
106
       
106