ma slave: un-hardcode keys

2018-09-17 00:48:35 +02:00 · 2018-09-17 00:48:35 +02:00 · 8224f5b0f9
parent 0d214dea92
commit 8224f5b0f9
1 changed files with 2 additions and 3 deletions
--- a/2configs/remote-build/slave.nix
+++ b/2configs/remote-build/slave.nix
@ -1,11 +1,10 @@
-{
+{config,...}:{
  nix.trustedUsers = [ "nixBuild" ];
  users.users.nixBuild = {
      name = "nixBuild";
      useDefaultShell = true;
-      # TODO: put this somewhere else
      openssh.authorizedKeys.keys = [
-        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPlhb0TIBW9RN9T8Is4YRIc1RjOg+cxbZCaDjbM4zxrX nixBuild"
+        config.krebs.users.buildbotSlave.pubkey
      ];
    };
 }