petersweb-infra/nixos/hetzner.nix

{modulesPath, ...}: {
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
    (modulesPath + "/profiles/qemu-guest.nix")
    ./disk-config.nix
  ];

  # Fixes iotop
  boot.kernel.sysctl = {"kernel.task_delayacct" = 1;};

  boot.loader.grub = {
    # no need to set devices, disko will add all devices that have a EF02 partition to the list already
    # devices = [ ];
    efiSupport = true;
    efiInstallAsRemovable = true;
  };

  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = true;
    settings.UsePAM = false;
    settings.PermitRootLogin = "yes";
    settings.AllowUsers = [ "root@135.181.83.225" ];
    extraConfig = ''
      PrintLastLog no
UsePAM no
    '';
    hostKeys = [
      {
        bits = 4096;
        path = "/etc/ssh/ssh_host_rsa_key";
        type = "rsa";
      }
      {
        path = "/etc/ssh/ssh_host_ed25519_key";
        type = "ed25519";
      }

      # For secrets
      {
        path = "/root/.ssh/id_rsa_nix";
        type = "ed25519";
      }
    ];
  };
}