updates (untested)

flake.lock

@@ -191,11 +191,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1675763311,
-        "narHash": "sha256-bz0Q2H3mxsF1CUfk26Sl9Uzi8/HFjGFD/moZHz1HebU=",
+        "lastModified": 1676110339,
+        "narHash": "sha256-kOS/L8OOL2odpCOM11IevfHxcUeE0vnZUQ74EOiwXcs=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "fab09085df1b60d6a0870c8a89ce26d5a4a708c2",
+        "rev": "e5530aba13caff5a4f41713f1265b754dc2abfd8",
         "type": "github"
       },
       "original": {
@@ -207,11 +207,11 @@
     },
     "nur": {
       "locked": {
-        "lastModified": 1675950569,
-        "narHash": "sha256-v6p+D8e7GVcAlVoJGrAqjwjfAglKS9+GzbQFxd8d0Rc=",
+        "lastModified": 1676281484,
+        "narHash": "sha256-dWZXiud69G6LwzpFCaKFD4wpKarTRYY3605rLN9fw50=",
         "owner": "nix-community",
         "repo": "NUR",
-        "rev": "1ed7701bc2f5c91454027067872037272812e7a3",
+        "rev": "d44ab24d70b4e0080630730c42793fdff8ea0ace",
         "type": "github"
       },
       "original": {

hosts/tablet/tablet.nix

@@ -46,22 +46,6 @@
   networking.firewall.enable = true;
   networking.firewall.allowPing = true;
 
-  nix.buildMachines = [
-    {
-      hostName = "hetzner-vm.servers.genderfucked.monster";
-      system = "x86_64-linux";
-      sshUser = "root";
-      sshKey = "/usb/ssh-keys/chaos.priv";
-      publicHostKey = "AAAAC3NzaC1lZDI1NTE5AAAAIMIt2ABqwHhMjz9r6atv4XuX58xEWeStkmXUwvMVGv4w";
-      maxJobs = 16;
-      speedFactor = 4;
-      supportedFeatures = ["nixos-test" "benchmark" "big-parallel" "kvm"];
-      mandatoryFeatures = [];
-    }
-  ];
-  nix.distributedBuilds = true; # true;
-  nix.extraOptions = "builders-use-substitutes = true";
-
   networking.hostName = "tablet";
   time.timeZone = "Europe/London";
 

overlay/piped/meta.json

@@ -1,7 +1,7 @@
 {
   "frontend": {
-    "rev": "55c0e51fa86d516b1c7a4d9b70dad0d0bcbe8131",
-    "sha256": "sha256-AsvqRj/Kf+EXTiMm1ucsEnK+baNW23UskChauCpEZYA="
+    "rev": "eebd27eee06283ea937a28eaec2891096d1b14d4",
+    "sha256": "sha256-iVMsW+H068B/W965oPo3YnQGhEMI8CrLVpkG1kSm7rs="
   },
   "backend": {
     "rev": "e6f9bf884941b3a1bfe257ed3eb7f20fc1aa9dea",

presets/nixos/server-encrypted-drive.nix

@@ -1,8 +1,11 @@
 {
   config,
   pkgs,
+  tree,
   ...
 }: {
+  imports = with tree; [ profiles.sshd ];
+
   config.boot = {
     loader.systemd-boot.enable = false;
 
@@ -36,7 +39,6 @@
         enable = true;
         port = 22;
         authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
-        ciphers = ["chacha20-poly1305@openssh.com" "aes256-gcm@openssh.com" "aes128-gcm@openssh.com" "aes256-ctr" "aes192-ctr" "aes128-ctr"];
         hostKeys = ["/ssh_host_ed25519_key"];
       };
       postCommands = ''