[git] push default = simple
[nixos/server] use new declarative user management