Better Server cfg

systems/gateway/default.nix

@@ -1,27 +1,14 @@
-{ config, lib, inputs, ... }: 
-let
-  allUsers = lib.concatMap (peer: if peer.syscfg ? users then peer.syscfg.users else []) config.syscfg.peers;
-  groupedUsers = lib.groupBy (u: u.username) allUsers;
-  allowedUsernames = map (u: u.username) config.syscfg.users;
-  activeUsers = lib.filterAttrs (name: _: lib.elem name allowedUsernames) groupedUsers;
-in {
-  imports = [ ./hardware.nix ];
+{ config, lib, inputs, ... }: {
+  imports = [ ./hardware.nix ../../modules/server ];
 
-  services.openssh = {
+  system.autoUpgrade = {
     enable = true;
-    ports = [ 422 ];
-    banner = "";
-    settings = {
-      PasswordAuthentication = false;
-      PermitRootLogin = "prohibit-password";
-      ClientAliveInterval = 60;
-      ClientAliveCountMax = 3;
-      TCPKeepAlive = true;
-    };
+    flake = "git+https://git.helcel.net/sora/nixconfig"; 
+    flags = [
+      "--no-write-lock-file"
+    ];
+    dates = "04:00";
+    randomizedDelaySec = "30min";
+    allowReboot = false;
   };
-  users.users = lib.mapAttrs (name: userList: {
-    openssh.authorizedKeys.keys = lib.unique (
-      lib.concatMap (u: if u ? pubssh then [ u.pubssh ] else []) userList
-    );
-  }) activeUsers;
 }