Enable defaults.ssh

machine/empyrean/default.nix

@@ -17,8 +17,6 @@
 
   beatific.hostName = "empyrean";
   beatific.defaults = {
-    programs = false;
-    ssh = false;
     nebula = false;
     tvb = false;
   };
@@ -44,13 +42,10 @@
   networking.useDHCP = false;
   networking.interfaces.eth0.useDHCP = true;
 
-  # List packages installed in system profile. To search, run:
-  # $ nix search wget
   environment.systemPackages = with pkgs; [
-    vim htop git tinc_pre python3
+    tinc_pre
     gitea
   ];
-  environment.variables.EDITOR = "vim";
 
   services.nginx = let
     static-site = srv-dir: {
@@ -92,7 +87,6 @@
   };
 
   services.openssh = {
-    enable = true;
     settings.PasswordAuthentication = false;
     settings.PermitRootLogin = "prohibit-password";
   };
@@ -135,9 +129,7 @@
 
   networking.firewall = {
     enable = true;
-    allowPing = true;
     allowedTCPPorts = [
-      22  # ssh
       80  # http
       443 # https
       655 # tinc