add remote disko and some other things

machines.nix

@@ -6,6 +6,7 @@
     modules = [
       # impermanence
       ./modules/nixos/impermanence.nix
+      ./modules/nixos/impermanence-ssh.nix
 
       # hardware configuration
       # includes `system.stateVersion`
@@ -39,6 +40,7 @@
       # hardware configuration
       # verbatim as `nixos-generate-config` AND `system.stateVersion`
       ./modules/nixos/machines/109-199-104-83.nix
+      ./modules/nixos/disko/remote.nix
 
       # boot process
       # grub boot on /dev/sda
@@ -51,9 +53,12 @@
 
       # ssh through port 5522 among other things
       # andromeda@lenovo is the only user allowed access
-      ./modules/nixos/networking/hard-ssh.nix
-      ./modules/nixos/networking/ssh-as-root.nix
-      ({config, ...}: {users.users.root.openssh.authorizedKeys.keys = [config.pub-keys.ssh.andromeda];})
+      # ./modules/nixos/networking/hard-ssh.nix
+      #./modules/nixos/networking/ssh-as-root.nix
+      ({config, ...}: {
+        services.openssh.enable = true;
+        users.users.root.openssh.authorizedKeys.keys = [config.pub-keys.ssh.andromeda];
+      })
 
       # TODO add Impermanence to the following services
 
@@ -70,8 +75,6 @@
       # zulip chat server
       # zulip.domain
       # ./modules/nixos/zulip.nix
-      {
-      }
     ];
   };
 }