From 544439ec8bbe803ec8dabb0eb8e0b578439c88c4 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Tue, 27 Oct 2026 01:22:20 +0100
Subject: enode: allow root ssh (pubkey only), add&enable tailscaled

---
 hosts/enode/default.nix | 24 ++++++++++++++++++------
 1 file changed, 18 insertions(+), 6 deletions(-)

(limited to 'hosts/enode/default.nix')

diff --git a/hosts/enode/default.nix b/hosts/enode/default.nix
index 34c6f15..37739fb 100644
--- a/hosts/enode/default.nix
+++ b/hosts/enode/default.nix
@@ -1,9 +1,18 @@
 {
+  config,
   pkgs,
   inputs,
   modulesPath,
   ...
 }:
+let
+  ssh-pubkeys = [
+
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4aG8NI25TgjcDevjsY/Y6d3iYsQxSEtIpsqprMHmad osiris@underworld"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPUcWGKF3uIf/gqbo1/lxb8XLoi67Bc2tVi1Bd/Ddhoz isabella@wonderland"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvtzeVHgenfSUrpZeyZBoBTzN96rdYMy3KEJoRXja0O isabella@nyaan"
+  ];
+in
 {
   imports = [
     (modulesPath + "/profiles/qemu-guest.nix")
@@ -80,12 +89,9 @@
       description = "Isabella Morgana Bastaja";
       extraGroups = [ "wheel" ];
       initialPassword = "isabella";
-      openssh.authorizedKeys.keys = [
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM4aG8NI25TgjcDevjsY/Y6d3iYsQxSEtIpsqprMHmad osiris@underworld"
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPUcWGKF3uIf/gqbo1/lxb8XLoi67Bc2tVi1Bd/Ddhoz isabella@wonderland"
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEvtzeVHgenfSUrpZeyZBoBTzN96rdYMy3KEJoRXja0O isabella@nyaan"
-      ];
+      openssh.authorizedKeys.keys = ssh-pubkeys;
     };
+    users.root.openssh.authorizedKeys.keys = ssh-pubkeys;
     mutableUsers = false;
   };
   console.keyMap = "us";
@@ -96,14 +102,20 @@
     ports = [ 22 ];
     openFirewall = true;
     settings = {
-      PermitRootLogin = "no";
+      PermitRootLogin = "yes";
       PasswordAuthentication = false;
       AllowUsers = [
         "isabella"
+        "root"
       ];
     };
   };
 
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
+  };
+
   environment = {
     systemPackages = [
       pkgs.git
-- 
cgit v1.3.1