ma slave: un-hardcode keys

This commit is contained in:
makefu 2018-09-17 00:48:35 +02:00
parent 0d214dea92
commit 8224f5b0f9

View file

@ -1,11 +1,10 @@
{ {config,...}:{
nix.trustedUsers = [ "nixBuild" ]; nix.trustedUsers = [ "nixBuild" ];
users.users.nixBuild = { users.users.nixBuild = {
name = "nixBuild"; name = "nixBuild";
useDefaultShell = true; useDefaultShell = true;
# TODO: put this somewhere else
openssh.authorizedKeys.keys = [ openssh.authorizedKeys.keys = [
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPlhb0TIBW9RN9T8Is4YRIc1RjOg+cxbZCaDjbM4zxrX nixBuild" config.krebs.users.buildbotSlave.pubkey
]; ];
}; };
} }