Secrets via nixos-sops, caldav and fixed virt

1 files changed, 16 insertions, 0 deletions

diff --git a/users/remote-build.nix b/users/remote-build.nix
new file mode 100644
index 0000000..7993d70
--- /dev/null
+++ b/users/remote-build.nix
@@ -0,0 +1,16 @@
+{pkgs, config, ...}: {
+
+  sops.secrets.remote_pub = {
+    key = "remote/ssh/pub"; 
+    sopsFile = ../secrets/secrets.yaml;
+  };
+  users.users.remotebuild = {
+    isSystemUser = true; 
+    group = "remotebuild";
+    useDefaultShell = true; 
+    openssh.authorizedKeys.keyFiles = [ ../secrets/eli.pub ];
+  };
+
+  users.groups.remotebuild = {}; 
+  nix.settings.trusted-users = [ "remotebuild" ]; 
+}