setting up proxychains

modules/openssh.nix

@@ -23,7 +23,7 @@
 
     settings = {
       AllowAgentForwarding = "no";
-      AllowTcpForwarding = "no";
+      AllowTcpForwarding = lib.mkDefault "no";
       ChallengeResponseAuthentication = "no";
       ClientAliveCountMax = lib.mkDefault 2;
       Compression = "NO";

systems/bob/configuration.nix

@@ -1,6 +1,7 @@
 {
   imports = [
     ../../users/richie/global/desktop.nix
+    ../../users/richie/global/ssh.nix
     ../../users/richie/global/syncthing_base.nix
     ../../users/richie/global/zerotier.nix
     ./hardware.nix

systems/jeeves-jr/configuration.nix

@@ -1,6 +1,7 @@
 { pkgs, ... }:
 {
   imports = [
+    ../../users/richie/global/ssh.nix
     ../../users/richie/global/zerotier.nix
     ./docker
   ];

systems/jeeves/configuration.nix

@@ -1,6 +1,7 @@
 { pkgs, ... }:
 {
   imports = [
+    ../../users/richie/global/ssh.nix
     ../../users/richie/global/syncthing_base.nix
     ../../users/richie/global/zerotier.nix
     ./docker

users/richie/global/ssh.nix

@@ -0,0 +1 @@
+{ services.openssh.settings.AllowTcpForwarding = "yes"; }

users/richie/home/gui/default.nix

@@ -16,8 +16,9 @@
     mediainfo
     obs-studio
     obsidian
+    proxychains
     sweet-nova
-    vlc
     util-linux
+    vlc
   ];
 }

users/richie/home/sshconfig.nix

@@ -8,18 +8,21 @@
         user = "richie";
         identityFile = "~/.ssh/id_ed25519";
         port = 629;
+        dynamicForwards = [ { port = 9050; } ];
       };
       jeevesjr = {
         hostname = "192.168.90.35";
         user = "richie";
         identityFile = "~/.ssh/id_ed25519";
         port = 352;
+        dynamicForwards = [ { port = 9050; } ];
       };
       bob = {
         hostname = "192.168.90.25";
         user = "richie";
         identityFile = "~/.ssh/id_ed25519";
         port = 262;
+        dynamicForwards = [ { port = 9050; } ];
       };
       rhapsody-in-green = {
         hostname = "192.168.90.221";