primrose/.files
1
0
Fork 0
mirror of https://codeberg.org/leana8959/.files.git synced 2025-12-06 22:59:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

nix: I am builder !

Browse source
This commit is contained in:
Primrose 2024-07-19 00:13:44 +02:00
parent 67f510623a
commit 6cae1ef91a
Signed by: primrose
GPG key ID: 4E887A4CA9714ADA
3 changed files with 32 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

25
nix/nixosModules/i_am_builder/default.nix Normal file
View file

@ -0,0 +1,25 @@
{ lib, ... }:
{
nix.gc = lib.mkForce {
# Garbage-collect often
automatic = true;
dates = "*:45";
# Randomize GC to avoid thundering herd effects.
randomizedDelaySec = "1800";
};
users.users.nix-remote-builder = {
isNormalUser = true;
group = "nogroup";
# credit:
# https://github.com/nix-community/srvos/blob/main/nixos/roles/nix-remote-builder.nix
openssh.authorizedKeys.keys = map (key: ''restrict,command="nix-daemon --stdio" ${key}'') [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBt+MINzxBF8uyFIuz/UvMZe9Ml+qxU0hxxi7UAmUzpc leana@bismuth"
];
};
nix.settings.trusted-users = [ "nix-remote-builder" ];
}