From 254f2db23dc6e61a14d6c6bda6d90dbed36caeee Mon Sep 17 00:00:00 2001
From: geemili <opensource@geemili.xyz>
Date: Sat, 6 Jan 2024 14:42:34 -0700
Subject: [PATCH] more stuff

---
 configuration.nix | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index 1bb2c1b..c9534ec 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -242,6 +242,9 @@
       acl_policy_path = pkgs.writeText "acl_policy.hujson" ''
         {
           "groups": {
+            "group:servers": [
+              "samsehu",
+            ],
             "group:admin": [
               "geemili",
               "desttinghim",
@@ -257,9 +260,9 @@
           "ssh": [
             {
               "action": "accept",
-              "src": ["autogroup:member"],
-              "dst": ["autogroup:self"],
-              "users": ["autogroup:nonroot"],
+              "src": ["group:admin"],
+              "dst": ["group:servers"],
+              "users": ["group:admin", "geemili", "desttinghim"],
             },
           ],
         }
@@ -308,7 +311,12 @@
   ];
 
   # Use systemd-resolved and set networkmanager to allow mdns
-  services.resolved.enable = true;
+  services.resolved = {
+    enable = true;
+    extraConfig = ''
+      DNSStubListener=false
+    '';
+  };
   networking.networkmanager.connectionConfig."connection.mdns" = 2; # 2 == yes
 
   # Copy the NixOS configuration file and link it from the resulting system