Gaming: sshd for the server, static 10.0.0.20

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

hosts/FredOS-Gaming.nix

@@ -45,6 +45,20 @@
     nix.settings.max-jobs = 1;
     nix.settings.builders-use-substitutes = true;
 
+    # Lets the server (`ssh gaming` there, 10.0.0.20 reserved in devices.toml)
+    # in for remote fixes. LAN only: nothing in ports.toml forwards to it.
+    services.openssh = {
+      enable = true;
+      settings = {
+        PermitRootLogin = "no";
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+      };
+    };
+    users.users.fred.openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMbIdOSPjnJYQ7z7n0mHKo8T8PnAkCyIBCmT4KpsHyy/ fred@FredOS-Mediaserver"
+    ];
+
     programs.steam = {
       enable = true;
       remotePlay.openFirewall = true;

hosts/FredOS-Mediaserver.nix

@@ -42,6 +42,11 @@
         Port 2222
         HostKeyAlias FredOS-Eee
         StrictHostKeyChecking accept-new
+
+      Host gaming
+        HostName 10.0.0.20
+        HostKeyAlias FredOS-Gaming
+        StrictHostKeyChecking accept-new
     '';
 
     # Basic system packages