yevaud, orm: remote builds on kalessin

flake.nix

@@ -86,10 +86,6 @@
         # (can stil build locally with nixos-rebuild)
         deployment.targetHost = lib.mkDefault null;
 
-        # TODO: set up some remote builders
-        # until this is done, as we have multiple architectures, safer to build on target
-        deployment.buildOnTarget = true;
-
         imports = [
           home-manager.nixosModules.home-manager
           nur.nixosModules.nur

hosts/kalessin/default.nix

@@ -21,7 +21,11 @@ in
 
   qenya.services.remote-builder = {
     enable = true;
-    authorizedKeys.keys = [ keys.machines.tohru ];
+    authorizedKeys.keys = [
+      keys.machines.tohru
+      keys.machines.yevaud
+      keys.machines.orm
+    ];
   };
   boot.binfmt.emulatedSystems = [ "x86_64-linux" ];
 

hosts/orm/default.nix

@@ -14,6 +14,12 @@
   users.users.qenya.extraGroups = [ "wheel" ];
   qenya.base-server.enable = true;
 
+  qenya.services.distributed-builds = {
+    enable = true;
+    keyFile = "/etc/ssh/ssh_host_ed25519_key";
+    builders = [ "kalessin" ];
+  };
+
   randomcat.services.zfs.datasets = {
     "rpool_orm/state" = { mountpoint = "none"; };
     "rpool_orm/state/actual" = { mountpoint = "/var/lib/actual"; };

hosts/yevaud/default.nix

@@ -14,6 +14,12 @@
   users.users.qenya.extraGroups = [ "wheel" ];
   qenya.base-server.enable = true;
 
+  qenya.services.distributed-builds = {
+    enable = true;
+    keyFile = "/etc/ssh/ssh_host_ed25519_key";
+    builders = [ "kalessin" ];
+  };
+
   services.bind = {
     # enable = true;
     cacheNetworks = [ "10.127.0.0/16" "fd70:81ca:0f8f::/48" ];