server-configuration/targets/vpn/configuration.nix

{
  self,
  lib,
  config,
  pkgs,
  ...
}:
let
  nixosVars = builtins.fromJSON (builtins.readFile ./nixos-vars.json);
in
{
  imports = [
    self.nixosModules.hcloud
  ];
  users.users.root = {
    openssh.authorizedKeys.keys = nixosVars.ssh_keys;
    initialPassword = "nixos";
  };
  system.stateVersion = "23.11";

  networking = {
    hostName = "vpn";
    domain = "sudoer777.dev";
  };

  services.openssh = {
    enable = true;
    settings.PasswordAuthentication = false;
  };

  services.cloud-init.enable = lib.mkForce false;

  boot.supportedFilesystems = ["btrfs"];
  environment.systemPackages = [
    pkgs.btrfs-progs
    pkgs.shadow
    pkgs.vim
    pkgs.speedtest-cli
  ];
}