From 72a532244594a370f597babf700fb013123d8c17 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Wed, 5 Nov 2025 01:29:41 +0100
Subject: Secrets via nixos-sops, caldav and fixed virt

---
 users/remote-build.nix | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 users/remote-build.nix

(limited to 'users/remote-build.nix')

diff --git a/users/remote-build.nix b/users/remote-build.nix
new file mode 100644
index 0000000..7993d70
--- /dev/null
+++ b/users/remote-build.nix
@@ -0,0 +1,16 @@
+{pkgs, config, ...}: {
+
+  sops.secrets.remote_pub = {
+    key = "remote/ssh/pub"; 
+    sopsFile = ../secrets/secrets.yaml;
+  };
+  users.users.remotebuild = {
+    isSystemUser = true; 
+    group = "remotebuild";
+    useDefaultShell = true; 
+    openssh.authorizedKeys.keyFiles = [ ../secrets/eli.pub ];
+  };
+
+  users.groups.remotebuild = {}; 
+  nix.settings.trusted-users = [ "remotebuild" ]; 
+}
-- 
cgit v1.3.1