From 9300a07f5b8c7250c21994aa0da17049c704c2c9 Mon Sep 17 00:00:00 2001
From: "Agatha V. Lovelace" <agatha@technogothic.net>
Date: Fri, 22 Nov 2024 17:28:12 +0100
Subject: [PATCH] Set up Nix build server

---
 common/remote-builds.nix                 | 17 +++++++++++++++++
 hosts/Agathas-Mac-mini/configuration.nix |  5 +++++
 hosts/ritual/configuration.nix           |  2 +-
 3 files changed, 23 insertions(+), 1 deletion(-)
 create mode 100644 common/remote-builds.nix

diff --git a/common/remote-builds.nix b/common/remote-builds.nix
new file mode 100644
index 0000000..6ed5d02
--- /dev/null
+++ b/common/remote-builds.nix
@@ -0,0 +1,17 @@
+{
+  nix.distributedBuilds = true;
+  nix.buildMachines = [
+    {
+      hostName = "tears";
+      systems = [
+        "x86_64-linux"
+        "i686-linux"
+      ];
+      supportedFeatures = [ "big-parallel" ];
+      maxJobs = 4;
+
+      sshUser = "root";
+      sshKey = "/Users/agatha/Projects/nix-infra/secrets/id_ed25519-nix-builder";
+    }
+  ];
+}
diff --git a/hosts/Agathas-Mac-mini/configuration.nix b/hosts/Agathas-Mac-mini/configuration.nix
index db62bb7..f593ab9 100644
--- a/hosts/Agathas-Mac-mini/configuration.nix
+++ b/hosts/Agathas-Mac-mini/configuration.nix
@@ -2,6 +2,8 @@
 {
   imports = [
     ../../common/home_manager/common.nix
+    ../../common/remote-builds.nix
+    ../../common/fragments/graphical/barebones.nix
     ../../common/fragments/graphical/iosevka.nix
   ];
 
@@ -17,6 +19,7 @@
       "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
       "cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o="
     ];
+    trusted-users = [ "@admin" ];
   };
 
   # Needed for the nix-darwin environment even if zsh is not used.
@@ -40,4 +43,6 @@
     iosevka
     siji
   ];
+
+  system.stateVersion = 1;
 }
diff --git a/hosts/ritual/configuration.nix b/hosts/ritual/configuration.nix
index 7fc7c0c..cefbd0c 100644
--- a/hosts/ritual/configuration.nix
+++ b/hosts/ritual/configuration.nix
@@ -2,7 +2,7 @@
   imports = [
     ./hardware-configuration.nix
     ../../common/fragments/graphical
-    ../../common/fragments/yubikey.nix
+    ../../common/remote-builds.nix
     ../../common/home_manager/common.nix
   ];