add the SSH key for the remote builder

All the secrets were rekeyed.

1 files changed, 6 insertions, 8 deletions

diff --git a/profiles/remote-builder.nix b/profiles/remote-builder.nix
index cc7751f..50d3e84 100644
--- a/profiles/remote-builder.nix
+++ b/profiles/remote-builder.nix
@@ -1,21 +1,18 @@
-{ ... }:
+{ config, ... }:
 {
   nix.buildMachines = [
     {
-      hostName = "vm-synology";
+      hostName = "builder";
       sshUser = "builder";
 
-      # 'ssh-ng' is faster if both machines are NixOS but falls flat if the
-      # machine Nix will attempt a connection to is not NixOS. In such a case
-      # you must use 'ssh' instead.
-      protocol = "ssh-ng";
+      protocol = "ssh";
+
+      sshKey = config.age.secrets.ssh-remote-builder.path;
 
-      # Systems for which builds will be offloaded.
       systems = [
         "x86_64-linux"
       ];
 
-      # Default is 1 but may keep the builder idle in between builds
       maxJobs = 1;
 
       supportedFeatures = [
@@ -30,5 +27,6 @@
     Host builder
       User builder
       HostName vm-synology
+      IdentityFile ${config.age.secrets.ssh-remote-builder.path}
   '';
 }