flake: switch to building on target by default

flake.nix

@@ -90,6 +90,7 @@
         # disable remote deployment by default
         # (can stil build locally with nixos-rebuild)
         deployment.targetHost = lib.mkDefault null;
+        deployment.buildOnTarget = lib.mkDefault true;
 
         imports = [
           lix-module.nixosModules.default

hosts/kalessin/default.nix

@@ -21,10 +21,7 @@ in
 
   qenya.services.remote-builder = {
     enable = true;
-    authorizedKeys.keys = [
-      keys.machines.kilgharrah
-      keys.machines.tohru
-    ];
+    authorizedKeys.keys = [ ];
   };
 
   system.stateVersion = "23.11";

hosts/kilgharrah/default.nix

@@ -41,12 +41,11 @@ in
 
   qenya.services.remote-builder = {
     enable = true;
-    authorizedKeys.keys = [ keys.machines.tohru ];
-  };
-  qenya.services.distributed-builds = {
-    enable = true;
-    keyFile = "/etc/ssh/ssh_host_ed25519_key";
-    builders = [ "kalessin" ];
+    authorizedKeys.keys = [
+      keys.machines.yevaud
+      keys.machines.orm
+      keys.machines.tohru
+    ];
   };
 
   programs.steam.enable = true;

hosts/orm/default.nix

@@ -14,6 +14,12 @@
   users.users.qenya.extraGroups = [ "wheel" ];
   qenya.base-server.enable = true;
 
+  qenya.services.distributed-builds = {
+    enable = true;
+    keyFile = "/etc/ssh/ssh_host_ed25519_key";
+    builders = [ "kilgharrah" ];
+  };
+
   randomcat.services.zfs.datasets = {
     "rpool_orm/state" = { mountpoint = "none"; };
     "rpool_orm/state/actual" = { mountpoint = "/var/lib/actual"; };

hosts/tohru/default.nix

@@ -49,7 +49,7 @@
   qenya.services.distributed-builds = {
     enable = true;
     keyFile = "/etc/ssh/ssh_host_ed25519_key";
-    builders = [ "kilgharrah" "kalessin" ];
+    builders = [ "kilgharrah" ];
   };
 
   programs.evolution.enable = true; # not in home-manager yet; not declaratively configurable yet

hosts/yevaud/default.nix

@@ -17,6 +17,12 @@
   users.users.qenya.extraGroups = [ "wheel" ];
   qenya.base-server.enable = true;
 
+  qenya.services.distributed-builds = {
+    enable = true;
+    keyFile = "/etc/ssh/ssh_host_ed25519_key";
+    builders = [ "kilgharrah" ];
+  };
+
   randomcat.services.zfs.datasets = {
     "rpool/state" = { mountpoint = "none"; };
     "rpool/state/forgejo" = { mountpoint = "/var/lib/forgejo"; };