From 29e65c1598b16d8ba415b545fc100ff6b9b8d2d4 Mon Sep 17 00:00:00 2001
From: Jonas Juselius <jonas.juselius@tromso.serit.no>
Date: Sat, 11 Oct 2025 11:09:09 +0200
Subject: [PATCH] fix: misc cleanups

---
 rossby/fs-work/default.nix |  8 ++++----
 rossby/login/default.nix   | 22 +---------------------
 2 files changed, 5 insertions(+), 25 deletions(-)

diff --git a/rossby/fs-work/default.nix b/rossby/fs-work/default.nix
index a076df5..02e9b64 100644
--- a/rossby/fs-work/default.nix
+++ b/rossby/fs-work/default.nix
@@ -25,6 +25,10 @@ in {
     # services.udev.extraRules = ''
     #     KERNEL=="ibp65s0", SUBSYSTEM=="net", ATTR{create_child}:="0x7666"
     # '';
+    security.sudo.extraConfig = ''
+      %sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
+      %admin ALL=(admin) NOPASSWD: ALL
+    '';
 
     environment.systemPackages = with pkgs; [
         rdma-core
@@ -101,10 +105,6 @@ in {
       useNetworkd = true;
       useDHCP = false;
       hostName = name;
-      defaultGateway = {
-        interface = "enp1s0np0";
-        address = "172.16.239.1";
-      };
       firewall = {
         allowedTCPPorts = [];
         allowedUDPPorts = [];
diff --git a/rossby/login/default.nix b/rossby/login/default.nix
index 6b9d52a..8fba504 100644
--- a/rossby/login/default.nix
+++ b/rossby/login/default.nix
@@ -91,16 +91,6 @@ in
       #       "172.19.254.0/24"
       #       "172.19.255.0/24"
       #   ];
-        infiniband-exporter = {
-          enable = false;
-          nameMap = ''
-              # 0xe8ebd3030024981e "c0-1"
-          '';
-        };
-        slurm-exporter = {
-          enable = false;
-          port = 6080;
-        };
       };
     };
 
@@ -151,16 +141,6 @@ in
       };
     };
 
-    systemd.automounts = [
-        # {
-        #   wantedBy = [ "multi-user.target" ];
-        #   automountConfig = {
-        #     TimeoutIdleSec = "600";
-        #   };
-        #   where = "/home";
-        # }
-      ];
-
     nix.extraOptions = ''
       # secret-key-files = /etc/nix/rossby.key
     '';
@@ -273,7 +253,7 @@ in
     services.tailscale =  {
       enable = true;
       authKeyFile = "/var/lib/secrets/tailscale.key";
-      useRoutingFeatures = "server"; # for exit-node usage
+      useRoutingFeatures = "client";
       extraUpFlags = [
         "--login-server=https://headscale.svc.oceanbox.io"
         "--accept-dns=true"