community builder
This commit is contained in:
parent
7c06b78278
commit
8cf5d99c53
|
@ -57,8 +57,13 @@ let
|
||||||
'';
|
'';
|
||||||
|
|
||||||
sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) {
|
sops.secrets = lib.mkIf (lib.hasPrefix "/run/secrets/" (thatHost.ssh.userPrivateKey or "")) {
|
||||||
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = {};
|
"${lib.removePrefix "/run/secrets/" thatHost.ssh.userPrivateKey}" = {
|
||||||
|
mode = "0440";
|
||||||
|
group = "nix-community-builder";
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
users.groups.nix-community-builder = {};
|
||||||
|
|
||||||
})
|
})
|
||||||
# in
|
# in
|
||||||
(mkIf ((thisHostIsBuilder || thisHostIsHopHost) && thatHostIsConsumer) {
|
(mkIf ((thisHostIsBuilder || thisHostIsHopHost) && thatHostIsConsumer) {
|
||||||
|
|
|
@ -42,6 +42,7 @@
|
||||||
extraGroups = [
|
extraGroups = [
|
||||||
"pbsds"
|
"pbsds"
|
||||||
"users" # backward compat
|
"users" # backward compat
|
||||||
|
"nix-community-builder"
|
||||||
"networkmanager"
|
"networkmanager"
|
||||||
"audio"
|
"audio"
|
||||||
"sound"
|
"sound"
|
||||||
|
|
|
@ -41,7 +41,7 @@
|
||||||
"rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no";
|
"rocm.pbsds.net".proxyJump = "isvegg.pvv.ntnu.no";
|
||||||
|
|
||||||
# nix-community
|
# nix-community
|
||||||
/* "darwin-build-box.nix-community.org" = {}; */
|
"darwin-build-box.nix-community.org" = {};
|
||||||
|
|
||||||
# ntnu
|
# ntnu
|
||||||
"garmr.idi.ntnu.no".forwardX11 = true;
|
"garmr.idi.ntnu.no".forwardX11 = true;
|
||||||
|
|
Loading…
Reference in New Issue