chore: update flake

host/ark/default.nix

@@ -15,7 +15,7 @@
     ./service/radicale.nix
     ./service/wakapi.nix
 
-    ./service/elytra.nix
+    # ./service/elytra.nix
     ./service/money.nix
   ];
 
@@ -51,8 +51,8 @@
           "audio.koon.us" = "http://localhost:8021";
           "radicale.koon.us" = "http://localhost:5232";
           "waka.koon.us" = "http://localhost:3006";
-          "ride.koon.us" = "http://localhost:3007";
-          "ride-api.koon.us" = "http://localhost:8080";
+          # "ride.koon.us" = "http://localhost:3007";
+          # "ride-api.koon.us" = "http://localhost:8080";
 
           "money.koon.us" = "http://localhost:3160";
           "zero.koon.us" = "http://localhost:4848";

host/ark/service/git.nix

@@ -1,4 +1,23 @@
 { lib, config, pkgs, ... }: {
+
+  services.openssh = {
+    enable = true;
+
+    # hostKeys = [
+    #   { path = "/etc/ssh/ssh_host_ed25519_key"; type = "ed25519"; }
+    #   { path = "/etc/ssh/ssh_host_rsa_key"; type = "rsa"; bits = 4096; }
+    # ];
+
+    settings = {
+      # explicitly allow post-quantum KEX
+      KexAlgorithms = [
+        "mlkem768x25519-sha256"
+        "sntrup761x25519-sha512"
+        "curve25519-sha256"
+      ];
+    };
+  };
+
   services.gitea = {
     enable = true;
     user = "git";

host/ark/sops.nix

@@ -24,13 +24,6 @@
         owner = config.users.users.wakapi.name;
       };
 
-      "elytra-backend-env" = {
-        owner = config.users.users.backend.name;
-      };
-      "elytra-frontend-env" = {
-        owner = config.users.users.elytra-web.name;
-      };
-
       "money-env" = {
         owner = config.users.users.money.name;
       };