Add postgres, fix hedgedoc, various cleanups

base.nix

@@ -18,16 +18,6 @@
     keyMap = "no";
   };
 
-  system.autoUpgrade = {
-    enable = true;
-    flake = "github:felixalbrigtsen/nixos-server-conf";
-    flags = [
-      "--update-input" "nixpkgs"
-      "--update-input" "unstable"
-      "--no-write-lock-file"
-    ];
-  };
-
   nix = {
     gc = {
       automatic = true;
@@ -56,6 +46,13 @@
     enable = true;
     permitRootLogin = "no";
     passwordAuthentication = false;
+    kbdInteractiveAuthentication = false;
+    extraConfig = ''
+      AllowTcpForwarding yes
+      X11Forwarding no
+      AllowAgentForwarding yes
+      AuthenticationMethods publickey
+    '';
   };
 
   users.users.felixalb = {