From 0c9b217d36da3e29f23ece44b034fa98322daf28 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Sat, 8 Nov 2025 19:21:05 +0100
Subject: Remote build support fully modularized

---
 hosts/apocalypse/default.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'hosts/apocalypse/default.nix')

diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index c4bffbf..eb9d14c 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -6,6 +6,9 @@
      ./backup.nix
      ./firewall.nix
    ];
+
+  ## TODO REMOVE LATER TO PREVENT ELI FROM BUILDING REMOTELY
+  boot.binfmt.emulatedSystems = ["aarch64-linux"]; 
   
   ## Addons for this system
   addons = { 
@@ -19,6 +22,12 @@
     vpn.mullvad.enable = true; 
     vpn.eduvpn.enable = true; 
     gpg.enable = true;
+
+    remote_builder = {
+      enable = true; 
+      allowedKeyFiles = [../../secrets/eli.pub];
+      openFirewall = true; 
+    }; 
   };
 
    boot.loader.grub = { 
@@ -83,7 +92,7 @@
   services.fwupd.enable = true; 
 
   services.openssh = {
-    enable = false; 
+    enable = true; 
     ports = [22]; 
     openFirewall = false; 
     allowSFTP = false; 
-- 
cgit v1.3.1