c3d2/nix-config
c3d2
/
nix-config
24
7
Fork 3
Code Issues 12 Pull Requests 2 Releases Wiki Activity

hydra: add restricted remote builder

This commit is contained in:
Sandro - 2023-04-23 01:17:16 +02:00
parent 473d54d7fc
commit 3b57b4821e
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/hydra/default.nix
View File

@ -1,4 +1,4 @@
{ config, lib, libS, pkgs, ... }:
{ config, lib, libS, pkgs, ssh-public-keys, ... }:
let
cachePort = 5000;
@ -39,6 +39,12 @@ in
daemonCPUSchedPolicy = "idle";
daemonIOSchedClass = "idle";
daemonIOSchedPriority = 7;
remoteBuilder = {
enable = true;
sshPublicKeys = config.users.users.root.openssh.authorizedKeys.keys ++ [
/* "..." */
];
};
settings = {
allowed-uris = "http:// https:// ssh://";
auto-optimise-store = true;