just deploy as root (we're using safe ssh keys anyway)

2 files changed, 1 insertions, 26 deletions

diff --git a/hosts/ganymede/config.nix b/hosts/ganymede/config.nix
index bd990e8..6fe1e3e 100644
--- a/hosts/ganymede/config.nix
+++ b/hosts/ganymede/config.nix
@@ -64,6 +64,7 @@
           {
             port = 22;
             listenAddr = "0.0.0.0";
+            rootLogin = true;
           }
         ];
       };
diff --git a/hosts/ganymede/nixos.nix b/hosts/ganymede/nixos.nix
index 043f67a..a2314ee 100644
--- a/hosts/ganymede/nixos.nix
+++ b/hosts/ganymede/nixos.nix
@@ -59,32 +59,6 @@
     };
   };
 
-  # deploy user
-  nix.settings.trusted-users = ["deploy"];
-  users.groups."deploy" = {};
-  users.users."deploy" = {
-    isSystemUser = true;
-    group = "deploy";
-    shell = pkgs.bash;
-
-    openssh.authorizedKeys.keys = config.users.users."collin".openssh.authorizedKeys.keys;
-  };
-  security.sudo.extraRules = [
-    {
-      users = ["deploy"];
-      commands = [
-        {
-          command = "/nix/store/*/bin/switch-to-configuration";
-          options = ["NOPASSWD"];
-        }
-        {
-          command = "/run/current-system/sw/bin/shutdown";
-          options = ["NOPASSWD"];
-        }
-      ];
-    }
-  ];
-
   services.fail2ban.enable = true;
 
   programs.ssh.extraConfig = ''