add deploy-all script

hosts/hetzner-vm/hetzner-vm.nix

@@ -2,6 +2,7 @@
 
 {
   imports = with tree; [
+    users.root
     users.chaoticryptidz
 
     profiles.tailscale

hosts/lappy/lappy.nix

@@ -2,7 +2,9 @@
 
 {
   imports = with tree; [
+    users.root
     users.chaoticryptidz
+
     profiles.tailscale
     profiles.gui
     profiles.laptop
@@ -15,9 +17,11 @@
 
     # for sci-hub and whenever websites break
     profiles.tor
-    # profiles.sshd
+    profiles.sshd
   ];
 
+  networking.firewall.enable = true;
+
   home-manager.users.root = { imports = with tree; [ home.base ]; };
   home-manager.users.chaoticryptidz = {
     imports = with tree; [

outputs.nix

@@ -30,7 +30,7 @@ in {
   nixosConfigurations = import ./hosts ({ inherit tree; } // inputs);
 
   deploy.nodes.lappy = {
-    hostname = "localhost";
+    hostname = "100.115.10.34";
     profiles.system = {
       user = "root";
       path = deploy-rs.lib.x86_64-linux.activate.nixos
@@ -38,7 +38,7 @@ in {
     };
   };
   deploy.nodes.hetzner-vm = {
-    hostname = "65.21.182.73";
+    hostname = "100.116.159.25";
     username = "root";
     profiles.system = {
       user = "root";

profiles/tailscale/tailscale.nix

@@ -1 +1,4 @@
-{ ... }: { services.tailscale.enable = true; }
+{ ... }: {
+  services.tailscale.enable = true;
+  networking.firewall.trustedInterfaces = [ "tailscale0" ];
+}

scripts/deploy-all.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
+REPO_ROOT="${SCRIPT_DIR}/.."
+cd $REPO_ROOT
+
+git add .
+
+deploy ".#lappy"
+deploy ".#hetzner-vm"

users/root.nix

@@ -0,0 +1,7 @@
+{ config, ... }: {
+  users.users.root = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL4L1eBZzYXZNGBucTn/eOFp48el9JPiYt9iXQDpBSg/ chaoticryptidz@owo.monster"
+    ];
+  };
+}