From 382619b11531c4618bd4c60018b88d8f41de3494 Mon Sep 17 00:00:00 2001 From: Frank LoTurco Date: Sat, 22 Aug 2026 11:31:52 -0400 Subject: [PATCH] vergil: enable remotebuild service --- hosts/vergil/configuration.nix | 10 ++++++++++ hosts/vergil/remotebuild.pub | 1 + 2 files changed, 11 insertions(+) create mode 100644 hosts/vergil/remotebuild.pub diff --git a/hosts/vergil/configuration.nix b/hosts/vergil/configuration.nix index 32014ca..5b0e62c 100644 --- a/hosts/vergil/configuration.nix +++ b/hosts/vergil/configuration.nix @@ -35,6 +35,16 @@ in }; }; + users.users."remotebuild" = { + isSystemUser = true; + group = "remotebuild"; + useDefaultShell = true; + openssh.authorizedKeys.keyFiles = [ ./remotebuild.pub ]; + }; + + users.groups.remotebuild = { }; + nix.settings.trusted-users = [ "remotebuild" ]; + services = { nginx = { enable = true; diff --git a/hosts/vergil/remotebuild.pub b/hosts/vergil/remotebuild.pub new file mode 100644 index 0000000..37ff497 --- /dev/null +++ b/hosts/vergil/remotebuild.pub @@ -0,0 +1 @@ +ssh-rsa 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 frank@nero