From 72a532244594a370f597babf700fb013123d8c17 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Wed, 5 Nov 2025 01:29:41 +0100
Subject: Secrets via nixos-sops, caldav and fixed virt

---
 users/remote-build.nix | 16 ++++++++++++++++
 users/user-common.nix  |  3 ++-
 2 files changed, 18 insertions(+), 1 deletion(-)
 create mode 100644 users/remote-build.nix

(limited to 'users')

diff --git a/users/remote-build.nix b/users/remote-build.nix
new file mode 100644
index 0000000..7993d70
--- /dev/null
+++ b/users/remote-build.nix
@@ -0,0 +1,16 @@
+{pkgs, config, ...}: {
+
+  sops.secrets.remote_pub = {
+    key = "remote/ssh/pub"; 
+    sopsFile = ../secrets/secrets.yaml;
+  };
+  users.users.remotebuild = {
+    isSystemUser = true; 
+    group = "remotebuild";
+    useDefaultShell = true; 
+    openssh.authorizedKeys.keyFiles = [ ../secrets/eli.pub ];
+  };
+
+  users.groups.remotebuild = {}; 
+  nix.settings.trusted-users = [ "remotebuild" ]; 
+}
diff --git a/users/user-common.nix b/users/user-common.nix
index 4b60044..b6da2bb 100644
--- a/users/user-common.nix
+++ b/users/user-common.nix
@@ -1,4 +1,4 @@
-{pkgs, config, ...}: {
+{pkgs, config, inputs, ...}: {
    # Pass host config to HM (Common config)
    # TODO: Move this somewhere else.
    home-manager = { 
@@ -11,6 +11,7 @@
           _module.args.hostconfig = config;
 
        })
+         inputs.sops-nix.homeManagerModules.sops
      ];
    };
 }
-- 
cgit v1.3.1