o001 works finally

hosts/linode/l002/nginx.nix

@@ -151,7 +151,6 @@
     };
 
     # STREAMS
-    # TODO left off trying to get direct ssh working...
     streamConfig = ''
       server {
         listen 3032;
@@ -160,37 +159,9 @@
     '';
   };
 
-  # this breaks on restart on the server side no idea, can no longer ssh in 22 normally
-  # Convoluted way to get ssh to work for git server while also still allowing
-  # ssh connections to the machine normally (you can't have nginx bind port 22 since sshd does)
-  # but sshd allows us to use a ForceCommand that we cna then proxy through
-  #   environment.systemPackages = with pkgs; [
-  #     # NOTE requires nc which I am getting from somewhere.... would be better to put it here in sys packs?
-  #     (writeScriptBin "proxy-to-git" ''
-  #       #!${pkgs.bash}/bin/bash
-  #       nc 100.64.0.2 6611
-  #     '')
-  #   ];
-  #
-  # # TODO havent gotten this fully working yet
-  #
-  #   services.openssh.extraConfig = ''
-  #     Match Host git.joshuabell.xyz
-  #       ForceCommand proxy-to-git
-  #       PermitTTY no
-  #       X11Forwarding no
-  #       PermitTunnel no
-  #       GatewayPorts no
-  #       AllowAgentForwarding no
-  #   '';
-
   networking.firewall.allowedTCPPorts = [
     80 # web http
     443 # web https
     3032 # git ssh stream
   ];
-
-  networking.firewall.allowedUDPPorts = [
-    4242 # nebula
-  ];
 }