[carcosa] Create a user to execute remote builds

This is so I can downsize yuggoth, as it doesn't really need to be big enough to compile bookdb & bookmarks
barrucadu · Dec 11, 2024 · 24ea2f1 · 24ea2f1
1 parent 28a4e4f
commit 24ea2f1
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/hosts/carcosa/configuration.nix b/hosts/carcosa/configuration.nix
@@ -334,6 +334,21 @@ in
   nixfiles.bookmarks.remoteSync.receive.authorizedKeys =
     [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIChVw9DPLafA3lCLCI4Df9rYuxedFQTXAwDOOHUfZ0Ac remote-sync@nyarlathotep" ];
 
+
+  ###############################################################################
+  ## Remote Builds
+  ###############################################################################
+
+  users.extraUsers.nix-remote-builder = {
+    home = "/var/lib/nix-remote-builder";
+    createHome = true;
+    isSystemUser = true;
+    shell = pkgs.bashInteractive;
+    group = "nogroup";
+  };
+  nix.settings.trusted-users = [ config.users.extraUsers.nix-remote-builder.name ];
+
+
   ###############################################################################
   ## Miscellaneous
   ###############################################################################