overlays: split frequent ovlays into files that can be included

- add overlay for newer openssh

default.nix

@@ -11,10 +11,12 @@ let
     settings = {
       PermitRootLogin = "prohibit-password";
       PasswordAuthentication = false;
+      EnableEscapeCommandline = "yes";
     };
   } else {
     permitRootLogin = "prohibit-password";
     passwordAuthentication = false;
+    enableEscapeCommandline = "yes";
   };
 in {
   imports = [

overlays/default.nix

@@ -1,45 +1,12 @@
 { self, config, pkgs, lib, isUnstable, ... }:
 let
-  tailscale = self: super: {
-    tailscale = super.callPackage "${super.path}/pkgs/servers/tailscale" {
-      buildGoModule = args:
-        super.buildGo119Module (args // rec {
-          version = "1.36.0";
-          src = super.fetchFromGitHub {
-            owner = "tailscale";
-            repo = "tailscale";
-            rev = "v${version}";
-            sha256 = "sha256-hNyEABs/GdfOx6vLTVBgbOzkbFvEDYZ0y1y0a0mIsfA=";
-          };
-          vendorSha256 = "sha256-Jy3kjUA8qLhcw9XLw4Xo1zhD+IWZrDNM79TsbnKpx/g=";
-          ldflags = [
-            "-X tailscale.com/version.Long=${version}"
-            "-X tailscale.com/version.Short=${version}"
-          ];
-        });
-    };
-  };
-  matrix-synapse = self: super: {
-    matrix-synapse = super.matrix-synapse.overrideAttrs (old: rec {
-      version = "1.76.0";
-      pname = "matrix-synapse";
+  openssh = import ./openssh.nix;
+  tailscale = import ./tailscale.nix;
+  matrix-synapse = import ./matrix-synapse.nix;
 
-      src = super.fetchFromGitHub {
-        owner = "matrix-org";
-        repo = "synapse";
-        rev = "v${version}";
-        hash = "sha256-kPc6T8yLe1TDxPKLnK/TcU+RUxAVIq8qsr5JQXCXyjM=";
-      };
-
-      cargoDeps = super.rustPlatform.fetchCargoTarball {
-        inherit src;
-        name = "${pname}-${version}";
-        hash = "sha256-tXtnVYH9uWu0nHHx53PgML92NWl3qcAcnFKhiijvQBc=";
-      };
-    });
-  };
 in {
   nixpkgs.overlays = if isUnstable then [
+    openssh
     tailscale
 
     # https://github.com/NixOS/nixpkgs/pull/213613
@@ -101,8 +68,10 @@ in {
 
       });
     })
-  ] else
-    [ matrix-synapse ];
+  ] else [
+    matrix-synapse
+    openssh
+  ];
 }
 
 # Example Python dep overlay

overlays/matrix-synapse.nix

@@ -0,0 +1,22 @@
+let
+  matrix-synapse = self: super: {
+    matrix-synapse = super.matrix-synapse.overrideAttrs (old: rec {
+      version = "1.76.0";
+      pname = "matrix-synapse";
+
+      src = super.fetchFromGitHub {
+        owner = "matrix-org";
+        repo = "synapse";
+        rev = "v${version}";
+        hash = "sha256-kPc6T8yLe1TDxPKLnK/TcU+RUxAVIq8qsr5JQXCXyjM=";
+      };
+
+      cargoDeps = super.rustPlatform.fetchCargoTarball {
+        inherit src;
+        name = "${pname}-${version}";
+        hash = "sha256-tXtnVYH9uWu0nHHx53PgML92NWl3qcAcnFKhiijvQBc=";
+      };
+    });
+  };
+
+in matrix-synapse

overlays/openssh.nix

@@ -0,0 +1,12 @@
+let
+  openssh = self: super: {
+    openssh = super.openssh.overrideAttrs (old: rec {
+      version = "9.2p1";
+      src = super.fetchurl {
+        url = "mirror://openbsd/OpenSSH/portable/openssh-${version}.tar.gz";
+        hash = "sha256-P2bb8WVftF9Q4cVtpiqwEhjCKIB7ITONY068351xz0Y=";
+      };
+    });
+  };
+
+in openssh

overlays/tailscale.nix

@@ -0,0 +1,22 @@
+let
+  tailscale = self: super: {
+    tailscale = super.callPackage "${super.path}/pkgs/servers/tailscale" {
+      buildGoModule = args:
+        super.buildGo119Module (args // rec {
+          version = "1.36.0";
+          src = super.fetchFromGitHub {
+            owner = "tailscale";
+            repo = "tailscale";
+            rev = "v${version}";
+            sha256 = "sha256-hNyEABs/GdfOx6vLTVBgbOzkbFvEDYZ0y1y0a0mIsfA=";
+          };
+          vendorSha256 = "sha256-Jy3kjUA8qLhcw9XLw4Xo1zhD+IWZrDNM79TsbnKpx/g=";
+          ldflags = [
+            "-X tailscale.com/version.Long=${version}"
+            "-X tailscale.com/version.Short=${version}"
+          ];
+        });
+    };
+  };
+
+in tailscale