qusal/salt/sys-ssh-agent/files/client/systemd/qusal-ssh-agent-forwarder@.service

# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later

[Unit]
Description=Forward SSH Agent %i over Qrexec

[Service]
User=user
Group=user
Type=simple
UMask=0177
ExecStartPre=/usr/bin/mkdir -m 700 -p -- %T/%p
ExecStartPre=/usr/bin/ssh-agent -a %T/%p/%i.sock
ExecStart=/usr/bin/socat UNIX-LISTEN:"%T/%p/%i.sock,unlink-early,reuseaddr,fork" EXEC:"qrexec-client-vm -- @default qusal.SshAgent+%i"

[Install]
WantedBy=default.target
refactor: prefer systemd sockets over socat - Document preferred method for socket use depending on use case; - Fix Github web-flow key; - Standardize naming of services; - Use sys-ssh in ansible formula; - Start services conditionally with Qubes Service and evaluated by systemd ConditionPathExists= instead of installing on a per qube basis with rc.local scripts; - Change Qusal services to "qusal-" prefix instead of "qubes-" prefix. Fixes: https://github.com/ben-grande/qusal/issues/80 Fixes: https://github.com/ben-grande/qusal/issues/79 2024-06-25 16:16:26 -04:00			`# SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>`
refactor: initial commit 2023-11-13 09:33:28 -05:00			`#`
			`# SPDX-License-Identifier: AGPL-3.0-or-later`

			`[Unit]`
refactor: prefer systemd sockets over socat - Document preferred method for socket use depending on use case; - Fix Github web-flow key; - Standardize naming of services; - Use sys-ssh in ansible formula; - Start services conditionally with Qubes Service and evaluated by systemd ConditionPathExists= instead of installing on a per qube basis with rc.local scripts; - Change Qusal services to "qusal-" prefix instead of "qubes-" prefix. Fixes: https://github.com/ben-grande/qusal/issues/80 Fixes: https://github.com/ben-grande/qusal/issues/79 2024-06-25 16:16:26 -04:00			`Description=Forward SSH Agent %i over Qrexec`
refactor: initial commit 2023-11-13 09:33:28 -05:00
			`[Service]`
			`User=user`
			`Group=user`
			`Type=simple`
			`UMask=0177`
fix: avoid operand evaluation as argument Explicit end option parsing as the shell can be quite dangerous without it. 2024-08-06 11:04:16 -04:00			`ExecStartPre=/usr/bin/mkdir -m 700 -p -- %T/%p`
refactor: initial commit 2023-11-13 09:33:28 -05:00			`ExecStartPre=/usr/bin/ssh-agent -a %T/%p/%i.sock`
			`ExecStart=/usr/bin/socat UNIX-LISTEN:"%T/%p/%i.sock,unlink-early,reuseaddr,fork" EXEC:"qrexec-client-vm -- @default qusal.SshAgent+%i"`

			`[Install]`
			`WantedBy=default.target`