common/sshd: socket activate

hosts/common.nix

@@ -240,10 +240,14 @@ in {
 
     resolved.enable = true;
 
-    openssh= {
-      passwordAuthentication = false;
-      kbdInteractiveAuthentication = false;
-      permitRootLogin = "no";
+    openssh = {
+      startWhenNeeded = true;
+      settings = {
+        StreamLocalBindUnlink = true;
+        PasswordAuthentication = false;
+        KbdInteractiveAuthentication = false;
+        PermitRootLogin = "no";
+      };
     };
 
     udev.packages = with pkgs; [

hosts/tsuki/configuration.nix

@@ -59,15 +59,11 @@
     firewall.enable=true;
   };
 
-  services = {
-    openssh.enable = true;
-    printing.enable = true;
-    cron = {
-      enable = true;
-      systemCronJobs = [
-    #     "*/5 * * * *      root    date >> /tmp/cron.log"
-      ];
-    };
+  services.openssh.enable = true;
+
+  systemd.services."sshd@".serviceConfig = {
+    Nice = -15;
+    IOSchedulingClass = "realtime";
   };
 
   users = {