feat: move to single-user config

modules/features/services/caddy.nix

@@ -6,7 +6,7 @@ in
   flake.modules.nixos.caddy = {
     services.caddy = {
       enable = true;
-      email = repo.contact.email;
+      email = repo.account.primaryEmail.address;
       openFirewall = true;
     };
   };

modules/features/services/openssh.nix

@@ -1,4 +1,7 @@
-{ ... }:
+{ config, ... }:
+let
+  account = config.repo.account;
+in
 {
   flake.modules.nixos.ssh-agent-auth = {
     security.pam = {
@@ -8,10 +11,7 @@
   };
 
   flake.modules.nixos.openssh =
-    {
-      config,
-      ...
-    }:
+    { ... }:
     {
       services.openssh.openFirewall = true;
 
@@ -20,7 +20,7 @@
         settings = {
           PermitRootLogin = "no";
           PasswordAuthentication = false;
-          AllowUsers = builtins.attrNames config.meta.machine.users;
+          AllowUsers = [ account.name ];
         };
       };
     };