users/remote-build.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

{pkgs, config, ...}: {

  sops.secrets.remote_pub = {
    key = "remote/ssh/pub"; 
    sopsFile = ../secrets/secrets.yaml;
  };
  users.users.remotebuild = {
    isSystemUser = true; 
    group = "remotebuild";
    useDefaultShell = true; 
    openssh.authorizedKeys.keyFiles = [ ../secrets/eli.pub ];
  };

  users.groups.remotebuild = {}; 
  nix.settings.trusted-users = [ "remotebuild" ]; 
}