From 3f07d27c78d3298ca3e7dcf651dccd93f4b25bdf Mon Sep 17 00:00:00 2001
From: steffen <steffen@portuus.de>
Date: Sat, 14 Mar 2026 14:11:08 +0100
Subject: [PATCH] fix deploy-rs: use SSH port 2299 and user steffen instead of
 root

deploy-rs was configured with default port 22 and user root, but
SSH runs on port 2299 and root login is disabled. Also fix ssh-keyscan
in the deploy workflow to use the correct port.
---
 .forgejo/workflows/deploy.yml | 2 +-
 flake.nix                     | 7 ++++++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index 3d51189..9ae1e1e 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -29,7 +29,7 @@ jobs:
           mkdir -p ~/.ssh
           echo "$DEPLOY_KEY" > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
-          ssh-keyscan -H cryodev.xyz >> ~/.ssh/known_hosts
+          ssh-keyscan -p 2299 -H cryodev.xyz >> ~/.ssh/known_hosts
 
       - name: Deploy with deploy-rs
         run: nix run github:serokell/deploy-rs -- -s .#cryodev-main
diff --git a/flake.nix b/flake.nix
index 0dba405..7a481c8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -123,8 +123,13 @@
         nodes = {
           cryodev-main = {
             hostname = constants.domain;
+            sshOpts = [
+              "-p"
+              "2299"
+            ];
             profiles.system = {
-              user = "root";
+              user = "steffen";
+              sshUser = "steffen";
               path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.cryodev-main;
             };
           };