https://github.com/jonringer/server-configuration
Build server nixos configuration
https://github.com/jonringer/server-configuration
Last synced: about 1 year ago
JSON representation
Build server nixos configuration
- Host: GitHub
- URL: https://github.com/jonringer/server-configuration
- Owner: jonringer
- License: cc0-1.0
- Created: 2021-08-04T16:08:24.000Z (almost 5 years ago)
- Default Branch: main
- Last Pushed: 2024-10-11T22:59:49.000Z (over 1 year ago)
- Last Synced: 2024-10-12T00:31:07.887Z (over 1 year ago)
- Language: Nix
- Size: 87.9 KB
- Stars: 24
- Watchers: 5
- Forks: 19
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Ringer's server
To add yourself, please add the following to `configuration.nix`:
```nix
users.users. = {
isNormalUser = true;
openssh.authorizedKeys.keys = [
"ssh-rsa AAAAB3NzaC1yc2etc/etc/etcjwrsh8e596z6J0l7 example@host"
];
};
```
## Local configuration
To connect to the build machine, you will need to add this to your `~/.ssh/config`:
```
Host jonringer
HostName
Port
User alice
IdentitiesOnly yes
IdentityFile /home/alice/.ssh/id_rsa
ForwardAgent yes # enables use of local ssh agent (e.g. for github)
RemoteForward /run/user/$remote_uid/gnupg/S.gpg-agent /run/user/$uid/gnupg/S.gpg-agent.extra # for gpg signing (optional)
```
You will need to replace `alice`, `$remote_uid`, and `$uid`. (change host name if you want)
After applying the changes, you should be able to do:
```bash
ssh jonringer
```
To sign in.
## Nix binary cache
It might be useful in certain cases to use this server as a binary cache. For example,
if a jobset is made for a PR that you're iterating on.
**WARNING**: This server isn't held to the same security standards as the official
hydra instance. Care should be taken to avoid using binary packages from any 3rd party (this server included).
```nix
binaryCaches = [ "https://cache.jonringer.us" ];
binaryCachePublicKeys = [ "cache.jonringer.us:c06xmyNNX/uG4j7db3flzcz08Yi3rBkpdaLuZKrZvwIEZqv5fn8vpPY1CKR4OrX977Aw9g/4axmzHr/QdqD4BA==" ];
```