hydra: add restricted remote builder
This commit is contained in:
parent
473d54d7fc
commit
3b57b4821e
|
@ -1,4 +1,4 @@
|
||||||
{ config, lib, libS, pkgs, ... }:
|
{ config, lib, libS, pkgs, ssh-public-keys, ... }:
|
||||||
|
|
||||||
let
|
let
|
||||||
cachePort = 5000;
|
cachePort = 5000;
|
||||||
|
@ -39,6 +39,12 @@ in
|
||||||
daemonCPUSchedPolicy = "idle";
|
daemonCPUSchedPolicy = "idle";
|
||||||
daemonIOSchedClass = "idle";
|
daemonIOSchedClass = "idle";
|
||||||
daemonIOSchedPriority = 7;
|
daemonIOSchedPriority = 7;
|
||||||
|
remoteBuilder = {
|
||||||
|
enable = true;
|
||||||
|
sshPublicKeys = config.users.users.root.openssh.authorizedKeys.keys ++ [
|
||||||
|
/* "..." */
|
||||||
|
];
|
||||||
|
};
|
||||||
settings = {
|
settings = {
|
||||||
allowed-uris = "http:// https:// ssh://";
|
allowed-uris = "http:// https:// ssh://";
|
||||||
auto-optimise-store = true;
|
auto-optimise-store = true;
|
||||||
|
|
Loading…
Reference in New Issue