.github/workflows/arrow.yml

@@ -123,12 +123,10 @@ jobs:
         if: inputs.action == 'create'
         run: |
           echo "${{ env.DEPLOY_IDENTITY_BASE64 }}" | base64 -d > deploy_ed25519
-          chmod 0600 deploy_ed25519
           echo "${{ env.ARROW_IDENTITY_BASE64 }}" | base64 -d > arrow_ed25519
-          chmod 0600 arrow_ed25519
 
       - name: Copy Identity File to Host
         if: inputs.action == 'create'
         run: |
-          ssh -i deploy_ed25519 -o StrictHostKeyChecking=accept-new noah@${{ steps.host.outputs.stdout }} 'mkdir -pv .ssh'
+          ssh -o StrictHostKeyChecking=accept-new noah@${{ steps.host.outputs.stdout }} 'mkdir -pv .ssh'
           scp -i deploy_ed25519 arrow_ed25519 noah@${{ steps.host.outputs.stdout }}:~/.ssh/id_ed25519

hosts/arrow/modules.nix

@@ -20,10 +20,6 @@
     services.caddy.enable = true;
     services.transmission.enable = true;
 
-    # nix-index seems to each up too much memory for Vultr
-    home-manager.users.${globals.user}.programs.nix-index.enable =
-      inputs.nixpkgs.lib.mkForce false;
-
     virtualisation.vmVariant = {
       virtualisation.forwardPorts = [{
         from = "host";

modules/nixos/services/cloudflare.nix

@@ -78,10 +78,6 @@ in {
       owner = "caddy";
       group = "caddy";
     };
-    systemd.services.cloudflare-api-secret.serviceConfig.ExecStartPost = ''
-      /run/current-system/sw/bin/systemctl restart caddy.service
-      /run/current-system/sw/bin/systemctl restart cloudflare-dyndns.service
-    '';
 
     # Wait for secret to exist
     systemd.services.caddy = {