From fe1d1533da342007be10d5232d16b797df6db97a Mon Sep 17 00:00:00 2001 From: mc-fucker Date: Wed, 3 Apr 2024 14:55:46 +0200 Subject: [PATCH] changed remote build client key to use sops --- modules/remotebuild/client.nix | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/modules/remotebuild/client.nix b/modules/remotebuild/client.nix index 3644a62..8e0137d 100644 --- a/modules/remotebuild/client.nix +++ b/modules/remotebuild/client.nix @@ -1,12 +1,14 @@ -{ ... }: +{ config, ... }: { + sops.secrets."nixremote/nixremote" = {}; + sops.secrets."nixremote/nixremote.pub" = {}; nix.buildMachines = let system = "x86_64-linux"; protocol = "ssh-ng"; sshUser = "nixremote"; - sshKey = "/root/.ssh/nixremote"; + sshKey = config.sops.secrets."nixremote/nixremote".path; supportedFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ]; in [