fix: update compose submodule — remove apk add iptables-nft

flake.nix

@@ -12,17 +12,10 @@
       url = "git+https://git.lix.systems/lix-project/lix?ref=main";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    home-manager = {
+    self.submodules = true;
-      url = "github:nix-community/home-manager/release-25.11";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-    dotfiles = {
-      url = "git+https://code.lazyworkhorse.net/gortium/dotfiles.git";
-      flake = false;
-    };
   };
 
-  outputs = { self, nixpkgs, agenix, lix, home-manager, dotfiles, ... }@inputs:
+  outputs = { self, nixpkgs, agenix, lix, ... }@inputs:
     let
       system = "x86_64-linux";
       keys = import ./lib/keys.nix;
@@ -63,7 +56,6 @@
               agenix.nixosModules.default
               ./hosts/lazyworkhorse/configuration.nix
               ./hosts/lazyworkhorse/hardware-configuration.nix
-              ./modules/nixos/home-manager/default.nix
               ./modules/nixos/filesystem/hoardingcow-mount.nix
               ./modules/nixos/services/docker_manager.nix
               ./modules/nixos/services/open_code_server.nix

hosts/lazyworkhorse/configuration.nix

@@ -207,7 +207,6 @@
     ai = {
       path = self + "/assets/compose/ai";
       envFile = config.age.secrets.containers_env.path;
-      ports = [ 22000 ];  # Syncthing TCP sync
     };
 
     cloudstorage = {
@@ -475,7 +474,7 @@
   services.openssh.settings = {
     PermitRootLogin = "no";
     MaxAuthTries = 3;
-    MaxSessions = 20;
+    MaxSessions = 10;
     LoginGraceTime = 30;
     ClientAliveInterval = 300;
     ClientAliveCountMax = 2;

modules/nixos/home-manager/default.nix

@@ -1,12 +0,0 @@
-{ config, pkgs, lib, inputs, ... }:
-
-{
-  imports = [ inputs.home-manager.nixosModules.home-manager ];
-
-  home-manager = {
-    useGlobalPkgs = true;
-    useUserPackages = true;
-
-    users.gortium = import ./dotfiles.nix { inherit config pkgs lib inputs; };
-  };
-}

modules/nixos/home-manager/dotfiles.nix

@@ -1,87 +0,0 @@
-{ config, pkgs, lib, inputs, ... }:
-
-{
-  home = {
-    username = "gortium";
-    homeDirectory = "/home/gortium";
-    stateVersion = "25.11";
-  };
-
-  # Import dotfiles as-is via home.file (Option 3 — git way)
-  # Hyprland
-  home.file.".config/hypr/hyprland.conf".source =
-    "${inputs.dotfiles}/hypr/.config/hypr/hyprland.conf";
-  home.file.".config/hypr/mocha.conf".source =
-    "${inputs.dotfiles}/hypr/.config/hypr/mocha.conf";
-  home.file.".config/hypr/hyprlock.conf".source =
-    "${inputs.dotfiles}/hypr/.config/hypr/hyprlock.conf";
-  home.file.".config/hypr/hypridle.conf".source =
-    "${inputs.dotfiles}/hypr/.config/hypr/hypridle.conf";
-  home.file.".config/hypr/hyprpaper.conf".source =
-    "${inputs.dotfiles}/hypr/.config/hypr/hyprpaper.conf";
-  home.file.".config/hypr/hyprshade.toml".source =
-    "${inputs.dotfiles}/hypr/.config/hypr/hyprshade.toml";
-
-  # Host-specific overrides: sourced from hyprland.conf
-  # hyprland.conf includes: source = ~/.config/hypr/hosts/$HOST.conf
-  # This file is created per-host and contains only the diffs.
-  home.file.".config/hypr/hosts" = {
-    source = "${inputs.dotfiles}/hypr/.config/hypr/hosts";
-    recursive = true;
-  };
-
-  # Zsh
-  home.file.".zshrc".source = "${inputs.dotfiles}/zsh/.zshrc";
-
-  # Tmux
-  home.file.".tmux.conf".source = "${inputs.dotfiles}/tmux/.tmux.conf";
-
-  # Neovim
-  home.file.".config/nvim" = {
-    source = "${inputs.dotfiles}/nvim/.config/nvim";
-    recursive = true;
-  };
-
-  # Wallpapers
-  home.file.".config/wallpapers" = {
-    source = "${inputs.dotfiles}/wallpapers/.config/wallpapers";
-    recursive = true;
-  };
-
-  # Wofi
-  home.file.".config/wofi" = {
-    source = "${inputs.dotfiles}/wofi/.config/wofi";
-    recursive = true;
-  };
-
-  # Packages that should be installed with home-manager
-  home.packages = with pkgs; [
-    # CLI tools
-    ripgrep
-    fd
-    jq
-    fzf
-    bat
-    eza
-    zoxide
-
-    # Development
-    git
-    lazygit
-    gh
-
-    # Hyprland extras
-    hyprshot
-    swaynotificationcenter
-    swww
-    wofi
-    waybar
-    kitty
-    foot
-    brightnessctl
-    playerctl
-    udiskie
-    hyprshade
-    pyprland
-  ];
-}