noa/nixconf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: try again with hydra

Browse source
This commit is contained in:
Noa Aarts 2024-10-21 18:18:23 +02:00
parent a65d265c15
commit 19898a0743
Signed by: noa
GPG key ID: 1850932741EFF672
2 changed files with 60 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/lambdaos/configuration.nix
View file

@ -52,7 +52,13 @@
];
write = true;
};
nix.settings.trusted-users = [ "nix-ssh" ];
nix = {
settings = {
builders-use-substitutes = true;
trusted-users = [ "root" "remotebuilder" "@wheel" ];
};
};
# Allow unfree packages
nixpkgs.config = {
@ -88,6 +94,16 @@
hashedPassword = "$6$rounds=512400$Zip3xoK2zcoR4qEL$N13YTHO5tpWfx2nKb1sye.ZPwfoRtMQ5f3YrMZqKzzoFoSSHHJ.l5ulCEa9HygFxZmBtPnwlseFEtl8ERnwF50";
openssh.authorizedKeys.keys = (import ../../common/ssh-keys.nix);
};
remotebuilder = {
isNormalUser = true;
hashedPassword = "!";
description = "Remote nix builder";
openssh.authorizedKeys.keys =
[
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILRZXNqs7FgVeTCt2ElOARt5f/bR1gjk5bS+zCJA6C1P root@nuOS"
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII7X17VovmxkwhKxIg795yO1Sf7dwO50pybMRlUDLLcA hydra@nuOS"
];
};
};
home-manager = {
@ -345,7 +361,6 @@
# networking.firewall.enable = false;
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave