nixops: set StreamLocalBindUnlink

nixops/desktop.nix

@@ -47,6 +47,10 @@ in
   services.openssh.enable = true;
   services.openssh.forwardX11 = true;
   services.openssh.passwordAuthentication = false;
+  services.openssh.extraConfig =
+    ''
+    StreamLocalBindUnlink yes
+    '';
   hardware.u2f.enable = true;
   services.pcscd.enable = true;
   programs.ssh.extraConfig =

nixops/light.nix

@@ -35,6 +35,10 @@
   services.openssh.enable = true;
   services.openssh.forwardX11 = true;
   services.openssh.passwordAuthentication = false;
+  services.openssh.extraConfig =
+    ''
+    StreamLocalBindUnlink yes
+    '';
   hardware.u2f.enable = true;
   services.pcscd.enable = true;
   programs.ssh.extraConfig =

nixops/rpi.nix

@@ -35,6 +35,10 @@ in
 
   services.openssh.enable = true;
   services.openssh.passwordAuthentication = false;
+  services.openssh.extraConfig =
+    ''
+    StreamLocalBindUnlink yes
+    '';
 
   networking.hostName = host;
   time.timeZone = "Asia/Hong_Kong";