reorg ssh wrappers

modules/hosts/john-pc/default.nix

@@ -17,8 +17,8 @@ in
     imports = with inputs.self.modules.homeManager; [
       rebuild
       john
-      mtls
-      restic
+      # mtls
+      # restic
       docker
       desktop
       step-client
@@ -33,6 +33,7 @@ in
 
     targets.genericLinux.enable = true;
 
+    homeManagerFlakeDir = flakeDir;
     home.username = "${username}";
     home.homeDirectory = "/home/${username}";
     home.packages = with pkgs; [
@@ -45,11 +46,11 @@ in
       }).wrapper
     ];
 
-    homeManagerFlakeDir = flakeDir;
     docker.enable = true;
-    ssh-new = {
-      certificates.enable = true;
-    };
+    # ssh-new = {
+    #   certificates.enable = true;
+    #   host-scripts.enable = true;
+    # };
     # ssh = {
     #   matchSets = {
     #     certs = true;
@@ -71,18 +72,18 @@ in
       mode = "0400";
       sopsFile = ./secrets.yaml;
     };
-    restic = {
-      passwordFile = resticPasswordFile;
-      OnCalendar = "*:0/15";
-      paths = [ "${config.xdg.userDirs.documents}" "/conf" ];
-      exclude = [
-        "/home/*/Pictures"
-        "/home/*/Videos"
-        "/home/*/go"
-        "/home/*/snap"
-        "/home/john/john-nas"
-      ];
-    };
+    # restic = {
+    #   passwordFile = resticPasswordFile;
+    #   OnCalendar = "*:0/15";
+    #   paths = [ "${config.xdg.userDirs.documents}" "/conf" ];
+    #   exclude = [
+    #     "/home/*/Pictures"
+    #     "/home/*/Videos"
+    #     "/home/*/go"
+    #     "/home/*/snap"
+    #     "/home/john/john-nas"
+    #   ];
+    # };
     # mtls = {
     #   enable = true;
     #   subject = hostname;