remote-builder

2024-02-25 20:04:21 +02:00
parent 731f0155d6
commit 861d4e81fc
4 changed files with 46 additions and 0 deletions
--- a/hosts/fra1-a/configuration.nix
+++ b/hosts/fra1-a/configuration.nix
@@ -70,6 +70,16 @@
      sshguard.enable = true;
      tailscale.enable = true;

+      remote-builder = {
+        enable = true;
+        uidgid = myData.uidgid.remote-builder;
+        sshAllowSubnet = myData.subnets.tailscale.sshPattern;
+        publicKeys = map (h: myData.hosts.${h}.publicKey) [
+          "vno1-oh2.servers.jakst"
+          "fwminex.motiejus.jakst"
+        ];
+      };
+
      postfix = {
        enable = true;
        saslPasswdPath = config.age.secrets.sasl-passwd.path;