From 7becfcd913aac24f11d52a67884e5ab9b5da1a27 Mon Sep 17 00:00:00 2001
From: teutat3s <teutates@mailbox.org>
Date: Mon, 31 Jan 2022 14:42:02 +0100
Subject: [PATCH] Fix last upstream merge, add back openssh service

Dont't autoUpgrade by default
---
 profiles/core/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/profiles/core/default.nix b/profiles/core/default.nix
index 87b79740..eca35b4e 100644
--- a/profiles/core/default.nix
+++ b/profiles/core/default.nix
@@ -117,7 +117,11 @@ in
       '';
     };
 
-    system.autoUpgrade.enable = true;
+    # For rage encryption, all hosts need a ssh key pair
+    services.openssh = {
+      enable = true;
+      openFirewall = lib.mkDefault false;
+    };
 
     # Service that makes Out of Memory Killer more effective
     services.earlyoom.enable = true;