diff --git a/hosts/droppie/droppie.nix b/hosts/droppie/droppie.nix index 76825ae0..4e03b6c2 100644 --- a/hosts/droppie/droppie.nix +++ b/hosts/droppie/droppie.nix @@ -13,6 +13,7 @@ in hardware.cpu.intel.updateMicrocode = true; pub-solar.core.disk-encryption-active = false; + pub-solar.core.lite = true; security.sudo.extraRules = [ { @@ -30,7 +31,7 @@ in "cloud.pub.solar".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIABPJSwr9DfnqV0KoL23BcxlWtRxuOqQpnFnCv4SG/LW"; }; - systemd.user.services.ssh-tunnel-cloud-pub-solar = { + systemd.services.ssh-tunnel-cloud-pub-solar = { unitConfig = { Description = "Reverse SSH connection to enable backups from IPv4-only to IPv6-only host"; After = [ "network.target" ]; @@ -38,6 +39,8 @@ in serviceConfig = { Type = "simple"; ExecStart = "${pkgs.openssh}/bin/ssh -vvv -g -N -T -o 'ServerAliveInterval 10' -o 'ExitOnForwardFailure yes' -R 127.0.0.1:22022:localhost:22 root@cloud.pub.solar"; + User = psCfg.user.name; + Group = "users"; Restart = "always"; RestartSec = "5s"; };