home: remove duplicated ict proxy settings

home/lyc/configurations/amalthea/default.nix

@@ -1,10 +1,5 @@
 { pkgs, lib, config, ... }:
 {
-
-  imports = [
-    ./ssh-proxy.nix
-  ];
-
   home.packages = with pkgs; [
     pinentry_mac
     clash-meta
@@ -14,6 +9,7 @@
   home.homeDirectory = "/Users/${config.home.username}";
 
   inclyc.tex.enable = false;
+  inclyc.ssh.ICTProxy = true;
 
   programs.vscode = {
     enable = true;

home/lyc/configurations/aplax/default.nix

@@ -1,10 +1,5 @@
 { pkgs, config, lib, ... }:
 {
-
-  imports = [
-    ./ssh-proxy.nix
-  ];
-
   programs.vscode.enable = true;
 
   home.homeDirectory = "/Users/${config.home.username}";
@@ -13,6 +8,8 @@
     flakes = "${config.home.homeDirectory}/flakes";
   };
 
+  inclyc.ssh.ICTProxy = true;
+
   home.packages = with pkgs; [
     (nerdfonts.override { fonts = [ "FiraCode" ]; })
     (lib.hiPrio clang-tools_16)

home/lyc/configurations/aplaz/default.nix

@@ -1,10 +1,5 @@
 { pkgs, config, lib, ... }:
 {
-
-  imports = [
-    ./ssh-proxy.nix
-  ];
-
   services.kdeconnect.enable = true;
 
   programs.vscode = {
@@ -16,6 +11,8 @@
     flakes = "${config.home.homeDirectory}/workspace/flakes";
   };
 
+  inclyc.ssh.ICTProxy = true;
+
   services.gpg-agent = {
     enable = true;
     pinentryFlavor = "curses";

home/lyc/configurations/metis/default.nix

@@ -18,4 +18,6 @@
     enable = true;
     pinentryPackage = pkgs.pinentry-curses;
   };
+
+  inclyc.ssh.ICTProxy = true;
 }

home/lyc/modules/programs/ssh-jump.nix

@@ -0,0 +1,31 @@
+# Declares jump hosts for different network profile.
+{ config, lib, ... }:
+let
+  cfg = config.inclyc.ssh;
+  ict-machines = [ "ict-sw" "ict-sw-git" "ict-repo" "ict-altric" ];
+  ict-portal = "ict-malcon-pub";
+in
+{
+  options = {
+    inclyc.ssh.ICTProxy = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      description = "Add ICT proxy for machines outside of ICT networks";
+      example = true;
+    };
+  };
+
+  config = lib.mkIf cfg.ICTProxy (
+    let
+      settings = builtins.listToAttrs (builtins.map
+        (name: {
+          name = "${name}";
+          value = { proxyJump = ict-portal; };
+        })
+        ict-machines);
+    in
+    {
+      programs.ssh.matchBlocks = settings;
+    }
+  );
+}

home/lyc/modules/programs/ssh.nix

@@ -1,5 +1,9 @@
 { lib, ... }:
 {
+  imports = [
+    ./ssh-jump.nix
+  ];
+
   programs.ssh = {
     enable = lib.mkDefault true;
     serverAliveInterval = 3;