feat: move SSH to non-default port

nixos/modules/gitea.nix

@@ -37,6 +37,11 @@ in
           LANDING_PAGE = "explore";
           OFFLINE_MODE = true;
           DISABLE_SSH = false;
+
+          # Use built-in SSH server
+          START_SSH_SERVER = true;
+          SSH_PORT = 22;
+
           DOMAIN = "git.dadada.li";
         };
         picture = {

nixos/modules/profiles/base.nix

@@ -50,5 +50,7 @@ in
 
   programs.zsh.enable = mkDefault true;
 
+  # Avoid some bots
+  services.openssh.ports = [ 2222 ];
 }