devices.srv1: enable password authentication

devices/srv1/default.nix

@@ -17,14 +17,13 @@ inputs:
           swap = [ "/nix/swap/swap" ];
           rollingRootfs = {};
         };
-        kernel.variant = "xanmod-lts";
         gui.enable = true;
       };
       hardware.cpus = [ "intel" ];
       services =
       {
         snapper.enable = true;
-        sshd = {};
+        sshd.passwordAuthentication = true;
         smartd.enable = true;
         slurm =
         {

devices/surface/default.nix

@@ -25,7 +25,7 @@ inputs:
         };
         nixpkgs.march = "skylake";
         nix = { substituters = [ "https://nix-store.chn.moe?priority=100" ]; githubToken.enable = true; };
-        kernel = { variant = "xanmod-lts"; patches = [ "surface" "hibernate-progress" ]; };
+        kernel.patches = [ "surface" "hibernate-progress" ];
         gui.enable = true;
       };
       hardware = { cpus = [ "intel" ]; gpu.type = "intel"; };

devices/vps4/default.nix

@@ -30,7 +30,6 @@ inputs:
         nix.substituters = [ "https://nix-store.chn.moe?priority=100" ];
         initrd.sshd.enable = true;
         networking.networkd = {};
-        kernel.variant = "xanmod-latest";
         nix-ld = null;
         binfmt = null;
       };

devices/vps7/default.nix

@@ -30,7 +30,6 @@ inputs:
         nix.substituters = [ "https://nix-store.chn.moe?priority=100" ];
         initrd.sshd.enable = true;
         networking.networkd = {};
-        kernel.variant = "xanmod-lts";
       };
       services =
       {

flake.lock

@@ -730,11 +730,11 @@
     "misskey": {
       "flake": false,
       "locked": {
-        "lastModified": 1724207820,
-        "narHash": "sha256-tm4YTpKqI7g4ACn8vkJUIFQmKcHlcDTkoBCrHEd3fp8=",
+        "lastModified": 1727700498,
+        "narHash": "sha256-h0oJ9128xsNGLzLTssjnTT+11vW4y+jrjy6p9qq6jFE=",
         "ref": "refs/heads/chn-mod",
-        "rev": "ac5c495d437fcdba2c523308119477a750440f3d",
-        "revCount": 25947,
+        "rev": "1eeabe04311c4aed657b184666152eeb5e837df9",
+        "revCount": 26110,
         "submodules": true,
         "type": "git",
         "url": "https://github.com/CHN-beta/misskey"

modules/packages/server.nix

@@ -63,7 +63,12 @@ inputs:
     services =
     {
       udev.packages = with inputs.pkgs; [ yubikey-personalization libfido2 ];
-      fwupd.enable = true;
+      fwupd =
+      {
+        enable = true;
+        # allow fwupd install firmware from any source (e.g. manually extracted from msi)
+        daemonSettings.OnlyTrusted = false;
+      };
     };
     home-manager = { useGlobalPkgs = true; useUserPackages = true; };
     # allow everyone run compsize

modules/system/kernel/default.nix

@@ -5,7 +5,7 @@ inputs:
     variant = mkOption
     {
       type = types.enum [ "nixos" "xanmod-lts" "xanmod-latest" "cachyos" "cachyos-lto" "cachyos-server" "zen" ];
-      default = "xanmod-latest";
+      default = "xanmod-lts";
     };
     patches = mkOption { type = types.listOf types.nonEmptyStr; default = []; };
     modules =