From f169a56ad60514fd74f8d23b326f634b387b443b Mon Sep 17 00:00:00 2001 From: Aspen Smith Date: Thu, 18 Jan 2024 10:30:23 -0500 Subject: feat(grfn/system): Use mugwump as a substituter for ogopogo Change-Id: I8ecd8543d1856e2361ee72d9a5ace7e281909063 Reviewed-on: https://cl.tvl.fyi/c/depot/+/10663 Reviewed-by: aspen Autosubmit: aspen Tested-by: BuildkiteCI --- users/grfn/system/system/machines/mugwump.nix | 4 ++++ users/grfn/system/system/machines/ogopogo.nix | 9 +++++++++ 2 files changed, 13 insertions(+) (limited to 'users') diff --git a/users/grfn/system/system/machines/mugwump.nix b/users/grfn/system/system/machines/mugwump.nix index 208cc32648e3..5b3cf1204904 100644 --- a/users/grfn/system/system/machines/mugwump.nix +++ b/users/grfn/system/system/machines/mugwump.nix @@ -73,6 +73,10 @@ with lib; nix.gc.dates = "monthly"; + users.users.grfn.openssh.authorizedKeys.keys = [ + depot.users.grfn.keys.whitby + ]; + age.secrets = let secret = name: depot.users.grfn.secrets."${name}.age"; diff --git a/users/grfn/system/system/machines/ogopogo.nix b/users/grfn/system/system/machines/ogopogo.nix index d6b70d834fab..af7075a97f92 100644 --- a/users/grfn/system/system/machines/ogopogo.nix +++ b/users/grfn/system/system/machines/ogopogo.nix @@ -137,4 +137,13 @@ mode = "0440"; }; }; + + nix.settings.substituters = [ "ssh://grfn@172.16.0.5" ]; + nix.settings.trusted-substituters = [ "ssh://grfn@172.16.0.5" ]; + programs.ssh.knownHosts.mugwump = { + extraHostNames = [ "172.16.0.5" ]; + publicKeyFile = pkgs.writeText "mugwump.pub" '' + ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFE2fxPgWO+zeQoLBTgsgxP7Vg7QNHlrQ+Rb3fHFTomB + ''; + }; } -- cgit 1.4.1