Openssh and nginx

configuration.nix

@@ -63,6 +63,7 @@
     curl
     git
     nginx
+    acme
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -76,14 +77,20 @@
   # List services that you want to enable:
 
   # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
-  services.nginx.enable = true;
+  services.openssh = {
+    enable = true;
+    settings.PermitRootLogin = "without-password";
+  };
+  # services.nginx.enable = false;
   
-  services.nginx.virtualHosts."git.blubb.fish" = {
+  services.nginx = {
+    enable = false;
+    virtualHosts."git.blubb.fish" = {
       addSSL = true;
       enableACME = true;
       locations."/".proxyPass = "http://10.0.0.24:3000/";
     };
+  };
   security.acme = {
   acceptTerms = true;
   defaults.email = "gentoo@blubb.fish";