finish configuration for ssh

- iptables geoip whitelist for ssh
- NOPASSWD for efibootmgr, allowing easy reboot into windows from laptop/phone
- no fastfetch for remote shells

hosts/takamaki/configs/fastfetch.nix

@@ -3,7 +3,21 @@
   lib,
   ...
 }: {
-  programs.zsh.initContent = lib.mkOrder 1500 "fastfetch";
+  programs.zsh.initContent = lib.mkOrder 1500 ''
+    SESSION_TYPE=local
+    if [ -n "$SSH_CLIENT" ] || [ -n "$SSH_TTY" ]; then
+      SESSION_TYPE=remote/ssh
+    # many other tests omitted
+    else
+      case $(ps -o comm= -p "$PPID") in
+        sshd|*/sshd) SESSION_TYPE=remote/ssh;;
+      esac
+    fi
+
+    if [ $SESSION_TYPE != remote/ssh ]; then
+      fastfetch
+    fi
+  '';
 
   programs.fastfetch = {
     enable = true;