From d617fb0ac83e3ce0e4c458d643a65418c2a5be2b Mon Sep 17 00:00:00 2001
From: k3t <k3t@k3t.dev>
Date: Thu, 9 Jul 2026 07:42:33 -0600
Subject: [PATCH] update openssh.nix

---
 modules/sys/pkgs.nix       | 1 -
 modules/sys/rc/openssh.nix | 9 ++++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/modules/sys/pkgs.nix b/modules/sys/pkgs.nix
index fc694c0..5e75847 100644
--- a/modules/sys/pkgs.nix
+++ b/modules/sys/pkgs.nix
@@ -7,7 +7,6 @@
     openssl
     topgrade
     htop
-    mosh
     btop
     python314
     wget2
diff --git a/modules/sys/rc/openssh.nix b/modules/sys/rc/openssh.nix
index 901d9fe..c57deec 100644
--- a/modules/sys/rc/openssh.nix
+++ b/modules/sys/rc/openssh.nix
@@ -5,8 +5,15 @@
   #  startAgent = true;
   #  agentPKCS11Whitelist = "${config.security.tpm2.pkcs11.package}/lib/*,/run/current-system/sw/lib/*";
   #};
+  programs.mosh = {
+    enable = true;
+    openFirewall = true;
+    withUtempter = true;
+  };
   services.openssh = {
     enable = true;
-    settings.PasswordAuthentication = true;
+    settings = {
+      GatewayPorts = true;
+    };
   };
 }