{ config, ... }:
{
  nix.buildMachines = [
    {
      hostName = "builder";
      sshUser = "builder";

      protocol = "ssh";

      sshKey = config.age.secrets.ssh-remote-builder.path;

      systems = [
        "x86_64-linux"
      ];

      maxJobs = 4;

      supportedFeatures = [
        "nixos-test"
      ];
    }
  ];

  nix.distributedBuilds = true;

  programs.ssh.extraConfig = ''
    Host builder
      User builder
      HostName rivendell
      IdentityFile ${config.age.secrets.ssh-remote-builder.path}
  '';
}