ssh-remote

system/core/ssh.nix

@@ -1,11 +1,24 @@
-{...}: {
-  networking.firewall.allowedTCPPorts = [22];
+{ ... }:
+{
+  networking.firewall.allowedTCPPorts = [ 22 ];
+
+  sops.secrets."ssh/nixremote/private" = {
+    sopsFile = ../../secrets/default.yaml;
+    path = "/root/.ssh/nixremote";
+  };
+
   services.openssh = {
     enable = true;
-    ports = [22];
+    ports = [ 22 ];
     settings = {
       PermitRootLogin = "no";
       PasswordAuthentication = false;
     };
+    extraConfig = ''
+      Host lilith-server-builder
+        HostName 2a01:4f9:4a:1ecb::2
+        User nixremote
+        IdentityFile /root/.ssh/nixremote
+    '';
   };
 }

system/optional/desktop.nix

@@ -1,15 +1,23 @@
-{ config, lib, ...}: {
+{
+  config,
+  lib,
+  pkgs,
+  hyprland,
+  ...
+}:
+{
   options.desktop.enable = lib.mkEnableOption "Enable Wayland compositor with hyprland login";
 
   config = lib.mkIf config.desktop.enable {
     hardware.graphics.enable = true;
-  
+
     security.polkit.enable = true;
-    security.pam.services.hyprlock = {};
+    security.pam.services.hyprlock = { };
 
     services.dbus.enable = true;
 
     programs.hyprland.enable = true;
+    programs.hyprland.package = hyprland.packages.${pkgs.stdenv.system}.hyprland;
 
     services.greetd = {
       enable = true;

system/optional/stylix.nix

@@ -54,6 +54,7 @@
       cursor = {
         package = pkgs.rose-pine-cursor;
         name = "Rosé Pine";
+        size = 10;
       };
     };
   };