From 80571337a8a21822449d1ca222677b3a6242ece4 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Thu, 19 Mar 2026 12:09:12 -0500
Subject: just deploy as root (we're using safe ssh keys anyway)

---
 hosts/ganymede/config.nix |  1 +
 hosts/ganymede/nixos.nix  | 26 --------------------------
 2 files changed, 1 insertion(+), 26 deletions(-)

(limited to 'hosts')

diff --git a/hosts/ganymede/config.nix b/hosts/ganymede/config.nix
index bd990e8..6fe1e3e 100644
--- a/hosts/ganymede/config.nix
+++ b/hosts/ganymede/config.nix
@@ -64,6 +64,7 @@
           {
             port = 22;
             listenAddr = "0.0.0.0";
+            rootLogin = true;
           }
         ];
       };
diff --git a/hosts/ganymede/nixos.nix b/hosts/ganymede/nixos.nix
index 043f67a..a2314ee 100644
--- a/hosts/ganymede/nixos.nix
+++ b/hosts/ganymede/nixos.nix
@@ -59,32 +59,6 @@
     };
   };
 
-  # deploy user
-  nix.settings.trusted-users = ["deploy"];
-  users.groups."deploy" = {};
-  users.users."deploy" = {
-    isSystemUser = true;
-    group = "deploy";
-    shell = pkgs.bash;
-
-    openssh.authorizedKeys.keys = config.users.users."collin".openssh.authorizedKeys.keys;
-  };
-  security.sudo.extraRules = [
-    {
-      users = ["deploy"];
-      commands = [
-        {
-          command = "/nix/store/*/bin/switch-to-configuration";
-          options = ["NOPASSWD"];
-        }
-        {
-          command = "/run/current-system/sw/bin/shutdown";
-          options = ["NOPASSWD"];
-        }
-      ];
-    }
-  ];
-
   services.fail2ban.enable = true;
 
   programs.ssh.extraConfig = ''
-- 
cgit v1.3.1