unify hosts

machines.nix

@@ -27,8 +27,10 @@
       ./modules/nixos/networking/networks/109-199-104-83.nix
 
       # ssh through port 5522 among other things
+      # andromeda@lenovo is the only user allowed access
       ./modules/nixos/networking/hard-ssh.nix
       ./modules/nixos/networking/ssh-as-root.nix
+      ({config, ...}: {users.users.root.openssh.authorizedKeys.keys = [config.pub-keys.ssh.andromeda];})
 
       # boilerplate settings
       ./modules/nixos/common.nix

modules/nixos/zulip.nix

@@ -4,7 +4,7 @@
   ];
   services.zulip = {
     enable = true;
-    host = "zulip.${config.networking.domain}";
+    host = "chat.${config.networking.domain}";
     camoKeyFile = builtins.toString config.age.secrets.zulip-camoKey.path;
     rabbitmqPasswordFile = builtins.toString config.age.secrets.zulip-rabbitmqPassword.path;
     secretKeyFile = builtins.toString config.age.secrets.zulip-secretKey.path;