diff --git a/config.nix b/config.nix
index 1a2a511..7931201 100644
--- a/config.nix
+++ b/config.nix
@@ -2,23 +2,27 @@
 {
   users.users.xan = {
     isNormalUser = true;
-    extraGroups = [
-      "networkmanager"
-      "wheel"
-    ];
-    packages = with pkgs; [
-      tree
-    ];
+    extraGroups = [ "wheel" ];
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILsq6xp3LtOL4iBF4+ehkGC8GFpbZLnyckgad8Fh5QKy xan.lol"
     ];
   };
 
   environment.systemPackages = with pkgs; [
+    tree
     wget
-    kitty
     helix
     yazi
     fastfetch
   ];
+
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+    };
+  };
+
+  security.sudo.wheelNeedsPassword = false;
 }
diff --git a/flake.nix b/flake.nix
index d7eb0aa..c72115a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,13 +1,11 @@
 {
-description = "xan's own flake for clis!";
+  description = "partial config for nix hosts managed by xan";
 
-inputs = {
-  nixpkgs.url = "github:nixos/nixpkgs/release-25.11";
-};
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs/release-25.11";
+  };
 
-outputs = { nixpkgs }: {
-  nixosConfigurations.hostname = nixpkgs.lib.nixosSystem {
-    modules = [ ./config.nix ];
+  outputs = { ... }: {
+    nixosModules.default = import ./config.nix;
   };
-};
 }