---
hostname: ikaros

desktop_sessions_enabled:
  - sway
  - hyprland

desktop_default_session: hyprland
desktop_default_session_env: wayland

host_packages:
  - openssh
  - mesa-dri
  - vulkan-loader
  - mesa-vulkan-radeon
  - mesa-vaapi
  - xf86-video-amdgpu

host_ufw_rules:
  - rule: allow
    port: "22"
    proto: tcp
    src: "192.168.0.0/24"

host_sshd_settings:
  PermitRootLogin: "no"
  PubkeyAuthentication: "yes"
  PasswordAuthentication: "no"
  KbdInteractiveAuthentication: "no"

host_sshd_allow_users:
  - "{{ username }}"

host_authorized_ssh_keys: "{{ vault_ikaros_authorized_ssh_keys | default([]) }}"

host_enabled_services:
  - sshd