feat: distributed builds

hosts/thegeneralist-central/cache/key.age

@@ -1,7 +1,7 @@
 age-encryption.org/v1
--> ssh-ed25519 pp9qdQ 7QBh40bF+3U+uQaQiZNMVsIWX2ZX162OKbuzgNwIR3A
-Fj2ACjgfeswbIt+ril51zlNaacqgMzkl8p3CQpiUGFo
---- yVZxFaEnzft0ovxvy0CbdIZso0qVMyFPGocBRiONTQM
-b²Q^4öø4ƒy!Rq9+AE6î²ÓòÅåW&ÃÇÃt[Ñç.ƒ…â/<2F>ª„ª™J¼<4A>#Bu„zwIïêÖ/ÊGCo¼xÕn©™0Ö1·J¡ckJv/¸p¤qwÿûz B/ßíëÖy<C396>$,¥;I–À3©wˆYÙ»üòSÔ
-ë³ÑP2‡
-_
ƒÀ”Á_µõDPž
+-> ssh-ed25519 pp9qdQ hxgD5olkewZpdkhEmVaGYypGzM403Xa7INBRzt78+kU
+LTj/042NIvyLcDA3VpWO6M+pdl2fhzjyXzA3jWP+III
+--- E7wuA8Hb4tpfvqQtPxexcGGK9ng/NVhI16XcErKVAFE
+-þŒüá8'ß|Ú<>dù²ùÊ#j9•(æ
+MAF+
‹[¼û’eNk_Ñ2\Ëƺ#d"øÅð§‹Òµw<PPU-­	»M¶G.Ôõ«
G/?™¾(qØ#{_C}IìJÚT…Ï»
+NHQãm¨ †^H¶´É¶<C389>ž­ òY±{aÈÙgfŽs“S›šø.À

hosts/thegeneralist-central/configuration.nix

@@ -7,15 +7,30 @@
 {
   imports = [ ./hardware-configuration.nix ./site.nix ./cache ];
 
-  users.users.thegeneralist = {
-    isNormalUser = true;
-    description = "thegeneralist";
-    extraGroups = [ "wheel" "audio" "video" "input" "scanner" ];
-    shell = pkgs.zsh;
-    home = "/home/thegeneralist";
-    openssh.authorizedKeys.keys = let
-      inherit (import ../../keys.nix) thegeneralist;
-    in [ thegeneralist ];
+  age.secrets.password.file = ./password.age;
+  users.users = {
+    thegeneralist = {
+      isNormalUser = true;
+      description = "thegeneralist";
+      extraGroups = [ "wheel" "audio" "video" "input" "scanner" ];
+      shell = pkgs.zsh;
+      home = "/home/thegeneralist";
+      hashedPasswordFile = config.age.secrets.password.path;
+      openssh.authorizedKeys.keys = let
+        inherit (import ../../keys.nix) thegeneralist;
+      in [ thegeneralist ];
+    };
+
+    build = {
+      isNormalUser = true;
+      description = "for distributed builds";
+      extraGroups = [ "build" ];
+      shell = pkgs.zsh;
+      hashedPasswordFile = config.age.secrets.password.path;
+      openssh.authorizedKeys.keys = let
+        inherit (import ../../keys.nix) thegeneralist;
+      in [ thegeneralist ];
+    };
   };
 
   home-manager = {

hosts/thegeneralist-central/password.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 pp9qdQ hAL4bshCsrk6ICT4G3eH9SUNmrjHxNZyMce0dhvr7S0
+TUFsXZVHHRAfV0O4TFcGw/jgAuG0o+kswWyWft1PdxY
+--- oBWT2yMt7VN1Oz94ThsyKmhYfB0C3niB4NfTBW+66x0
+"»??EGßskÊ„UYAµÊØí<C398>
½ðD霈Eõ©’òóÞ“¨”lJÛH9ò<39>