Merge branch 'master' of ssh://git.nx2.site:20022/nx2/dotfiles

system-modules/boot.nix

@@ -22,8 +22,8 @@
       device = "nodev";
       # useOSProber = true;
       efiSupport = true;
-      theme = grub-theme-ascii-diana;
-      font = "${grub-theme-ascii-diana}/unicode.pf2";
+      #theme = grub-theme-ascii-diana;
+      #font = "${grub-theme-ascii-diana}/unicode.pf2";
       fontSize = 50;
       splashImage = null;
   

system-modules/nx2site.nix

@@ -5,14 +5,16 @@
   ] else [];
   
   config = lib.mkIf (host == "NxACE") {
-    security.acme = {
-      acceptTerms = true;
-      defaults.email = "acme@nx2.site";
-      certs."nx2.site" = {
-        dnsProvider = "namecheap";
-        environmentFile = ../secrets/nx2site/namecheap-creds.env;
-        renewalInterval = "*-*-02 00:05:00";
-      };
-    }; 
-  };
-}
+  #    security.acme = {
+#      acceptTerms = true;
+#      defaults.email = "acme@nx2.site";
+#      certs."nx2.site" = {
+#        dnsProvider = "namecheap";
+#        environmentFile = ../secrets/nx2site/namecheap-creds.env;
+#      };
+#    };
+    # services.nginx = {
+      # enable = true;
+    # }; 
+  }; 
+ }

system-modules/sshd.nix

@@ -0,0 +1,12 @@
+{ config, pkgs, lib, secrets, ... }:
+
+{
+  services.openssh = {
+    enable = true;
+    ports = secrets.nx2site.ssh.ports;
+    settings = {
+      PasswordAuthentication = false;
+    };
+  };
+}
+

system-modules/users.nix

@@ -7,6 +7,9 @@
     isNormalUser = true;
     extraGroups = [ "networkmanager" "wheel" "audio" "video" "docker" "libvirtd" "uinput" ];
     useDefaultShell = true;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHzEtnN/GrgXK7yz+0z1x6rKHhYYQhTOFQ6c6Faz79g2 Nx2-ed25519-ssh-key"
+    ];
     packages = with pkgs; []; # all in home.nix
   };
   users.users.tv = lib.mkIf (host == "NxACE") {