feat: mosh

nixos/common/ssh.nix

@@ -11,6 +11,8 @@ in {
     allowedTCPPorts = [(list.unsafeHead config.services.openssh.ports)];
   };
 
+  programs.mosh.enable = true;
+
   services.openssh = {
     enable = true;
     settings = {

systems/daiyousei.nix

@@ -21,6 +21,7 @@ _: let
   };
 in {
   arch = "aarch64";
+  deploy.hostname = "daiyousei.inskip.me";
   type = "NixOS";
   modules = [
     hostConfig

tf/oci_common_private_network/default_security_list.tf

@@ -1,6 +1,25 @@
 resource "oci_core_default_security_list" "this" {
   manage_default_resource_id = local.vcn.default_security_list_id
 
+  dynamic "ingress_security_rules" {
+    for_each = [
+      { from = 60000
+        to = 61000 }
+    ]
+    iterator = port
+    content {
+      protocol = local.protocol_number.udp
+      source = "0.0.0.0/0"
+
+      description = "Mosh traffic from any origin"
+
+      udp_options {
+        max = port.to
+        min = port.from
+      }
+    }
+  }
+
   dynamic "ingress_security_rules" {
     for_each = [22, 80, 443]
     iterator = port