bob

hosts/dunamis/users.nix

@@ -7,7 +7,10 @@
   sopSec = config.sops.secrets;
   secrets = inputs.mysecrets;
 in {
-  nix.settings.trusted-users = ["user"];
+  nix.settings.trusted-users = [
+    "user"
+    "remotebuild"
+  ];
   users.mutableUsers = false;
   users.users = {
     user = {
@@ -21,10 +24,14 @@ in {
         "${secrets}/ssh/id_ed25519_eldrid_user.pub"
       ];
     };
-    # work = {
-    #   isNormalUser = true;
-    #   extraGroups = ["video"];
-    #   shell = pkgs.nushell;
-    # };
+    remotebuild = {
+      isNormalUser = true;
+      createHome = false;
+      group = "remotebuild";
+      openssh.authorizedKeys.keyFiles = [
+        "${secrets}/ssh/id_ed25519_eldrid_rmbuild.pub"
+      ];
+    };
   };
+  users.groups.remotebuild = {};
 }