Enable mopidy and virtualisation via QEMU/KVM

configuration.nix

@@ -5,14 +5,15 @@
   boot = {
     kernelPackages = pkgs.linuxPackages_latest;
     kernelParams = [ "zfs.zfs_arc_max=536870912" ];
-    kernelModules = [ "i915" "acpi_call" ];
+    kernelModules = [ "i915" "acpi_call" "kvm-intel" ];
     extraModulePackages = with config.boot.kernelPackages; [ acpi_call ];
     supportedFilesystems = [ "zfs" ];
     zfs.requestEncryptionCredentials = true;
   };
 
   # Intel CPU tweaks
-  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+  hardware.cpu.intel.updateMicrocode =
+    lib.mkDefault config.hardware.enableRedistributableFirmware;
 
   hardware.opengl.extraPackages = with pkgs; [
     vaapiIntel
@@ -70,8 +71,24 @@
   users.users.coolneng = {
     isNormalUser = true;
     home = "/home/coolneng";
-    extraGroups = [ "wheel" "video" "audio" ];
-    shell = "/run/current-system/sw/bin/fish";
+    extraGroups = [ "wheel" "video" "audio" "libvirtd" ];
+    shell = pkgs.fish;
+  };
+
+  # Set fish shell for root user
+  users.users.root = {
+    shell = pkgs.fish;
+    openssh.authorizedKeys.keys = [
+      "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC9mMwf7yXwtiEABwq5zkNEXgveUhNEPfqa3VLdnG2UYArB6f2l2aFM+MkGc8s84T8cj7JDF2N1pEBvilGMNWmLT32IBfwjyJov/38/PTpWb3301hCck5EOWmykGWMXdRlIEj6vsR4UqeRFwbr8QBlxv2dTPe9wTrCLvkKOuaPWMyMgtEwnNHvB8e7eqUZZYVmRSQkWCqYmK7a6TCvHUg3XsmjQU3OSmTH+eXJEUL4OiSFKxd9eO5QU04uYDbX8f8jY/slReoEWbuJ/InSWFbPs6L3bUYQrl3ht/7DR9FqzcOpAN4AcrJFyIJzot8inpp6f5IsVVjy0dhNUGWtXMkOgNf6lmylokqFBb1Jcy/lJbgUtJZ5ZNjlJFCbjXHe6J0q7bYKJgMQKuY1N3rexhZIMsBXi8aYaSKaGqX7TPnBEPlr1hXda2lGm2l6jQq5Lj2U5aj5aBa/BYmKFGVxcMpRFlsWfYPyQ/2wxRcpNcDiJt0eWP70mhu8OcupPO9kxGw0= coolneng@panacea"
+    ];
+  };
+
+  # Enable localhost SSH
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "yes";
+    passwordAuthentication = false;
+    openFirewall = false;
   };
 
   # Import other configuration modules