From d23d7bf78b38fd7976d2dbbc063f406fa04f13d5 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sat, 9 Aug 2025 11:02:18 -0700
Subject: add the SSH key for the remote builder

All the secrets were rekeyed.
---
 profiles/remote-builder.nix | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

(limited to 'profiles/remote-builder.nix')

diff --git a/profiles/remote-builder.nix b/profiles/remote-builder.nix
index cc7751f..50d3e84 100644
--- a/profiles/remote-builder.nix
+++ b/profiles/remote-builder.nix
@@ -1,21 +1,18 @@
-{ ... }:
+{ config, ... }:
 {
   nix.buildMachines = [
     {
-      hostName = "vm-synology";
+      hostName = "builder";
       sshUser = "builder";
 
-      # 'ssh-ng' is faster if both machines are NixOS but falls flat if the
-      # machine Nix will attempt a connection to is not NixOS. In such a case
-      # you must use 'ssh' instead.
-      protocol = "ssh-ng";
+      protocol = "ssh";
+
+      sshKey = config.age.secrets.ssh-remote-builder.path;
 
-      # Systems for which builds will be offloaded.
       systems = [
         "x86_64-linux"
       ];
 
-      # Default is 1 but may keep the builder idle in between builds
       maxJobs = 1;
 
       supportedFeatures = [
@@ -30,5 +27,6 @@
     Host builder
       User builder
       HostName vm-synology
+      IdentityFile ${config.age.secrets.ssh-remote-builder.path}
   '';
 }
-- 
cgit v1.2.3