update-openconcho-fork

Add power.ups module configuration for the APC Back-UPS BVK1200M2
connected via USB (vendor 051d, product 0002) in standalone mode.

- Driver: usbhid-ups with auto port detection
- upsd listening on localhost only
- upsmon configured as master for graceful shutdown
- Uses the built-in NixOS power.ups module

hosts/lazyworkhorse/configuration.nix

@@ -207,6 +207,7 @@
     ai = {
       path = self + "/assets/compose/ai";
       envFile = config.age.secrets.containers_env.path;
+      ports = [ 22000 ];  # Syncthing TCP sync
     };
 
     cloudstorage = {
@@ -341,6 +342,44 @@
     HIP_VISIBLE_DEVICES = "0,1";
   };
 
+  # ── UPS (Uninterruptible Power Supply) ──────────────────────────────
+  # APC Back-UPS BVK1200M2 connected via USB (vendor 051d, product 0002)
+  power.ups = {
+    enable = true;
+    mode = "standalone";
+
+    ups = {
+      apc-backups = {
+        driver = "usbhid-ups";
+        port = "auto";
+        description = "APC Back-UPS BVK1200M2";
+      };
+    };
+
+    upsd = {
+      listen = [{
+        address = "127.0.0.1";
+      }];
+    };
+
+    users = {
+      nutmon = {
+        passwordFile = pkgs.writeText "ups-nutmon-password" "ups-nutmon-2025";
+        upsmon = "primary";
+      };
+    };
+
+    upsmon = {
+      monitor = {
+        apc-backups = {
+          system = "apc-backups@localhost";
+          user = "nutmon";
+          type = "master";
+        };
+      };
+    };
+  };
+
  # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
@@ -474,7 +513,7 @@
   services.openssh.settings = {
     PermitRootLogin = "no";
     MaxAuthTries = 3;
-    MaxSessions = 10;
+    MaxSessions = 20;
     LoginGraceTime = 30;
     ClientAliveInterval = 300;
     ClientAliveCountMax = 2;