refactor: additional cleanup of flatpaks and ssh access

features/flatpak.nix

@@ -9,14 +9,6 @@
     };
 
     remotes = lib.mkOptionDefault [
-      {
-        name = "flathub";
-        location = "https://dl.flathub.org/repo/flathub.flatpakrepo";
-      }
-      {
-        name = "flathub-beta";
-        location = "https://dl.flathub.org/beta-repo/flathub-beta.flatpakrepo";
-      }
       {
         name = "flatpark";
         location = "https://dl.flatpark.org/flatpark.flatpakrepo";

features/users.nix

@@ -8,6 +8,7 @@
       uid = 1000;
       description = "Frank LoTurco";
       hashedPasswordFile = config.sops.secrets.password_hash.path;
+      openssh.authorizedKeys.keyFiles = [ ../keys/personal_ssh_key_ed25519.pub ];
 
       extraGroups = [
         "wheel"

hosts/shared/nixos-pc.nix

@@ -108,7 +108,13 @@
       alsa.support32Bit = lib.mkForce false;
     };
 
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+      };
+    };
     affinity-thumbnailer.enable = true;
   };
 

hosts/shared/nixos-server.nix

@@ -19,7 +19,13 @@
   programs.bash.enable = true;
 
   services = {
-    openssh.enable = true;
+    openssh = {
+      enable = true;
+      settings = {
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+      };
+    };
     resolved.enable = false;
   };
 

hosts/vergil/configuration.nix

@@ -37,7 +37,7 @@ in
       isSystemUser = true;
       group = "remotebuild";
       shell = pkgs.bashInteractive;
-      openssh.authorizedKeys.keyFiles = [ ./keys/personal_ssh_key_ed25519.pub ];
+      openssh.authorizedKeys.keyFiles = [ ../../keys/personal_ssh_key_ed25519.pub ];
     };
   };