From 4b623086639448a23842526c1dcb3a9e60bf4590 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sun, 3 Aug 2025 19:35:48 -0700
Subject: attempt at configuring the remote builder on the VM

---
 machines/darwin/aarch64-darwin/mba-m2.nix   |  1 +
 machines/nixos/x86_64-linux/vm-synology.nix | 10 ++++++++++
 2 files changed, 11 insertions(+)

(limited to 'machines')

diff --git a/machines/darwin/aarch64-darwin/mba-m2.nix b/machines/darwin/aarch64-darwin/mba-m2.nix
index a2c5607..1cd9aa8 100644
--- a/machines/darwin/aarch64-darwin/mba-m2.nix
+++ b/machines/darwin/aarch64-darwin/mba-m2.nix
@@ -8,6 +8,7 @@
   imports = [
     "${self}/profiles/home-manager.nix"
     "${self}/profiles/darwin.nix"
+    "${self}/profiles/remote-builder.nix"
   ];
 
   system.primaryUser = adminUser.name;
diff --git a/machines/nixos/x86_64-linux/vm-synology.nix b/machines/nixos/x86_64-linux/vm-synology.nix
index 4b499f2..d947973 100644
--- a/machines/nixos/x86_64-linux/vm-synology.nix
+++ b/machines/nixos/x86_64-linux/vm-synology.nix
@@ -80,5 +80,15 @@
     };
   };
 
+  users.users.builder = {
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINBkozy+X96u5ciX766bJ/AyQ3xm1tXZTIr5+4PVFZFi"
+    ];
+    isNormalUser = true;
+    group = "nogroup";
+  };
+
+  nix.settings.trusted-users = [ "builder" ];
+
   system.stateVersion = "23.11"; # Did you read the comment?
 }
-- 
cgit v1.2.3