calcite,dolomite: minor fixes

machines/calcite/configuration.nix

@@ -16,6 +16,7 @@ in
   ];
 
   commonSettings = {
+    auth.enable = true;
     nix = {
       enableMirrors = true;
       signing.enable = true;
@@ -114,13 +115,15 @@ in
   xdg.portal = {
     enable = true;
     extraPortals = [
-      pkgs.xdg-desktop-portal-gtk
       pkgs.xdg-desktop-portal-gnome
+      pkgs.xdg-desktop-portal-gtk
     ];
     configPackages = [ pkgs.niri ];
   };
 
   systemd.user.services.xdg-desktop-portal-gtk.after = [ "graphical-session.target" ];
+  systemd.user.services.xdg-desktop-portal-gnome.after = [ "graphical-session.target" ];
+  systemd.user.services.xdg-desktop-portal-gnome.wantedBy = [ "graphical-session.target" ];
 
   services.greetd =
     let
@@ -281,7 +284,6 @@ in
     # Writting
     zotero
     # onlyoffice-bin
-    wpsoffice
 
     config.nur.repos.linyinfeng.wemeet
 

machines/dolomite/default.nix

@@ -58,31 +58,8 @@ in
       exporters.blackbox.enable = true;
     };
 
-    custom.kanidm-client = {
-      enable = true;
-      uri = "https://auth.xinyang.life/";
-      asSSHAuth = {
-        enable = true;
-        allowedGroups = [ "linux_users" ];
-      };
-      sudoers = [ "xin@auth.xinyang.life" ];
-    };
-
-    services.openssh = {
-      settings = {
-        PasswordAuthentication = false;
-        KbdInteractiveAuthentication = false;
-        PermitRootLogin = lib.mkForce "no";
-        GSSAPIAuthentication = "no";
-        KerberosAuthentication = "no";
-      };
-    };
-    services.fail2ban.enable = true;
-    programs.mosh.enable = true;
-
-    security.sudo = {
-      execWheelOnly = true;
-      wheelNeedsPassword = false;
+    custom.commonSettings = {
+      auth.enable = true;
     };
 
     services.sing-box =