From 0c9b217d36da3e29f23ece44b034fa98322daf28 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Sat, 8 Nov 2025 19:21:05 +0100
Subject: Remote build support fully modularized

---
 hosts/apocalypse/default.nix  | 11 ++++++++++-
 hosts/apocalypse/firewall.nix |  4 ++--
 2 files changed, 12 insertions(+), 3 deletions(-)

(limited to 'hosts/apocalypse')

diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index c4bffbf..eb9d14c 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -6,6 +6,9 @@
      ./backup.nix
      ./firewall.nix
    ];
+
+  ## TODO REMOVE LATER TO PREVENT ELI FROM BUILDING REMOTELY
+  boot.binfmt.emulatedSystems = ["aarch64-linux"]; 
   
   ## Addons for this system
   addons = { 
@@ -19,6 +22,12 @@
     vpn.mullvad.enable = true; 
     vpn.eduvpn.enable = true; 
     gpg.enable = true;
+
+    remote_builder = {
+      enable = true; 
+      allowedKeyFiles = [../../secrets/eli.pub];
+      openFirewall = true; 
+    }; 
   };
 
    boot.loader.grub = { 
@@ -83,7 +92,7 @@
   services.fwupd.enable = true; 
 
   services.openssh = {
-    enable = false; 
+    enable = true; 
     ports = [22]; 
     openFirewall = false; 
     allowSFTP = false; 
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 26097af..8cf3e61 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -33,9 +33,9 @@ let
   ]; 
 in 
 {
-    networking.nftables.enable = false; 
+    networking.nftables.enable = true; 
     networking.firewall = {
-        enable = false;
+        enable = true;
         checkReversePath = false; 
         allowedTCPPorts = baseTCP; 
         allowedUDPPorts = baseUDP; 
-- 
cgit v1.3.1