# https://nix.dev/tutorials/nixos/distributed-builds-setup.html
{ config, ... }:
{
  users.users.remotebuild = {
    isSystemUser = true;
    group = "remotebuild";
    useDefaultShell = true;

    openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
  };

  users.groups.remotebuild = { };
  nix = {
    nrBuildUsers = 64; # defaults to 32
    settings.trusted-users = [ "remotebuild" ];
  };

  systemd.services.nix-daemon.serviceConfig = {
    MemoryAccounting = true;
    MemoryMax = "90%";
    OOMScoreAdjust = 500;
  };
}