fix(ssh): Enable and troubleshoot ssh

.envrc

@@ -0,0 +1 @@
+use flake . --no-pure-eval

.gitignore

@@ -0,0 +1,2 @@
+.devenv
+.direnv

flake.nix

@@ -52,9 +52,11 @@
             }
           );
 
-          # Base dev shell
           devenv.shells.default = {
-            imports = [ "${self}/shells/base.nix" ];
+            imports = [
+              "${self}/shells/base.nix"
+              "${self}/shells/nix.nix"
+            ];
           };
 
           formatter = pkgs.nixfmt-rfc-style;

home/programs/default.nix

@@ -22,6 +22,7 @@
     ./neofetch.nix
     ./rbw.nix
     ./ripgrep.nix
+    ./ssh.nix
     ./starship.nix
     ./tmux.nix
     ./topgrade.nix

home/programs/ssh.nix

@@ -0,0 +1,22 @@
+{ ... }:
+{
+  programs.ssh = {
+    enable = true;
+
+    # Equivalent of ~/.ssh/config
+    #   %d - local user's home directory
+    #   %r - remote username
+    matchBlocks = {
+      "tty.marleycentre" = {
+        hostname = "admin.punkfairie.net";
+        identityFile = "%d/.ssh/%r@marleycentre";
+      };
+
+      "tty.marleynet" = {
+        hostname = "10.69.69.2";
+        port = 222;
+        identityFile = "%d/.ssh/%r@marleynet";
+      };
+    };
+  };
+}

shells/base.nix

@@ -1,4 +1,42 @@
-{ ... }:
+{ pkgs, ... }:
 {
+  packages = with pkgs; [
+    nix-direnv
+    gnupg
+    git
+    bitwarden-cli
+  ];
 
+  scripts.download_gpg_key.exec = # bash
+  ''
+    if ! bw login --check; then
+      echo "Please run `bw login`"
+      exit 1
+    fi
+
+    bw sync && \
+    bw get attachment private.key --itemid 335ce92f-974a-44d4-bc1c-b226005203f3 --output private.key && \
+    echo "Please run `set_gpg_tty && import_gpg_key`"
+  '';
+
+  scripts.set_gpg_tty.exec = # bash
+  ''
+    export GPG_TTY="$(tty)"
+  '';
+
+  scripts.import_gpg_key.exec = # bash
+  ''
+    exec gpg --import private.key
+  '';
+
+  scripts.gpg_no_pinentry.exec = # bash
+  ''
+    pkill gpg-agent
+    gpg-agent --pinentry-program=/usr/bin/pinentry-curses --daemon
+  '';
+
+  scripts.git_allow_push.exec = # bash
+  ''
+    git config http.version HTTP/1.1
+  '';
 }

shells/nix.nix

@@ -0,0 +1,8 @@
+{ pkgs, ... }:
+{
+  languages.nix.enable = true;
+
+  packages = with pkgs; [
+    nixfmt-rfc-style
+  ];
+}