nodes/home.nas: enable x11 forwarding for admins

bundles/openssh/files/sshd_config

@@ -37,3 +37,6 @@ Match Group sftp
 
 Match User ${','.join(sorted(admin_users))}
     AllowTcpForwarding yes
+% if enable_x_forwarding_for_admins:
+    X11Forwarding yes
+% endif

bundles/openssh/items.py

@@ -13,6 +13,7 @@ files = {
         'context': {
             'login_users': login_users,
             'admin_users': users_from_metadata,
+            'enable_x_forwarding_for_admins': node.metadata.get('openssh/enable_x_forwarding_for_admins', False),
         },
         'triggers': {
             'action:sshd_check_config',

nodes/home/nas.py

@@ -28,6 +28,10 @@ nodes['home.nas'] = {
             'unattended_upgrades': {
                 'day': 6,
             },
+            'packages': {
+                'mpv': {},
+                'youtube-dl': {},
+            },
         },
         'backups': {
             # This *is* the backup server
@@ -153,6 +157,7 @@ nodes['home.nas'] = {
             'allowed_users': {
                 'kunsi-t470', # backup user
             },
+            'enable_x_forwarding_for_admins': True,
         },
         'users': {
             'f2k1de': {