feat(machines/nixos/build01/nix-builder): add builder-specific keys via dgn-keys

Reuses the commit on builder-specific keys. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
2025-02-06 01:24:22 +01:00 · 2025-02-06 01:24:22 +01:00 · b5fe7bd71f
commit b5fe7bd71f
parent 551c75ac47
1 changed files with 1 additions and 0 deletions
--- a/machines/nixos/build01/nix-builder.nix
+++ b/machines/nixos/build01/nix-builder.nix
@ -18,6 +18,7 @@
    users.groups.nix-builders = { };
    users.users = lib.genAttrs meta.organization.groups.nix-builder (u: {
      extraGroups = [ "nix-builders" ];
+      openssh.authorizedKeys.keys = dgn-keys.getBuilderKeys u;
    });

    security.pam.loginLimits = [