deploy-rs: Fully working deployments from hermes to bebop

I'm not sure whether the passwordless sudo is required, but I'm too
tired to test right now. Anyway, this works.

Also unsure on the statelessness of deploy-rs, but again, its simple
enough, didn't require changing anything else much and it works.

Perhaps some day, I'll see about trying out colmena for deploying
secrets, but until then, agenix is good enough for my needs.

flake.nix

@@ -115,8 +115,9 @@
           fastConnection = true;
           remoteBuild = true;
           profiles.system = {
-            user = "payas";
-            path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.bebop;
+            sshUser = "payas";
+            user = "root";
+            path = deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.bebop;
           };
         };
       };

hosts/bebop/configuration.nix

@@ -29,8 +29,6 @@ in
     };
   };
 
-  security.sudo.wheelNeedsPassword = false;
-
   fileSystems = {
     "/" = {
       device = "/dev/disk/by-label/NIXOS_SD";

hosts/hermes/configuration.nix

@@ -20,6 +20,8 @@
     man.enable = true;
   };
 
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
+
   environment = {
     etc = with pkgs; {
       "jdk".source = jdk;

modules/common.nix

@@ -1,6 +1,7 @@
 { pkgs, ... }:
 
 {
+  security.sudo.wheelNeedsPassword = false;
   environment.systemPackages = with pkgs; [
     neovim # basic editing. No, nano is not it
     git # version control