From 0f2a17c81ba57ffaef2527be8c0b03e599d19d89 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Benjamin=20B=C3=A4dorf?= <hello@benjaminbaedorf.eu>
Date: Mon, 3 Oct 2022 03:09:12 +0200
Subject: [PATCH] F1 Droppie

---
 hosts/droppie/droppie.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/hosts/droppie/droppie.nix b/hosts/droppie/droppie.nix
index 76825ae0..4e03b6c2 100644
--- a/hosts/droppie/droppie.nix
+++ b/hosts/droppie/droppie.nix
@@ -13,6 +13,7 @@ in
     hardware.cpu.intel.updateMicrocode = true;
 
     pub-solar.core.disk-encryption-active = false;
+    pub-solar.core.lite = true;
 
     security.sudo.extraRules = [
       {
@@ -30,7 +31,7 @@ in
       "cloud.pub.solar".publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIABPJSwr9DfnqV0KoL23BcxlWtRxuOqQpnFnCv4SG/LW";
     };
 
-    systemd.user.services.ssh-tunnel-cloud-pub-solar = {
+    systemd.services.ssh-tunnel-cloud-pub-solar = {
       unitConfig = {
         Description = "Reverse SSH connection to enable backups from IPv4-only to IPv6-only host";
         After = [ "network.target" ];
@@ -38,6 +39,8 @@ in
       serviceConfig = {
         Type = "simple";
         ExecStart = "${pkgs.openssh}/bin/ssh -vvv -g -N -T -o 'ServerAliveInterval 10' -o 'ExitOnForwardFailure yes' -R 127.0.0.1:22022:localhost:22 root@cloud.pub.solar";
+        User = psCfg.user.name;
+        Group = "users";
         Restart = "always";
         RestartSec = "5s";
       };