diff --git a/hosts/vergil/configuration.nix b/hosts/vergil/configuration.nix index 1e0bcca..b5b6aab 100644 --- a/hosts/vergil/configuration.nix +++ b/hosts/vergil/configuration.nix @@ -36,8 +36,7 @@ "remotebuild" = { isSystemUser = true; group = "remotebuild"; - shell = pkgs.writeScript "nologin" "#!/bin/sh\necho 'Remote builds only.'"; - openssh.authorizedKeys.keyFiles = [ config.sops.secrets."remotebuild_ssh_key_rsa.pub".path ]; + openssh.authorizedKeys.keyFiles = [ ./keys/remotebuild_ssh_key_rsa.pub ]; }; }; diff --git a/hosts/vergil/keys/remotebuild_ssh_key_rsa.pub b/hosts/vergil/keys/remotebuild_ssh_key_rsa.pub new file mode 100644 index 0000000..107fe53 --- /dev/null +++ b/hosts/vergil/keys/remotebuild_ssh_key_rsa.pub @@ -0,0 +1 @@ +ssh-rsa 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