add build server user account

modules/default.nix

@@ -6,5 +6,6 @@
     ./environment/impermanence.nix
     ./secrets/sops.nix
     disko.nixosModules.default
+    ./hydra/build-server.nix
   ];
 }

modules/hydra/build-server-list.nix

@@ -0,0 +1 @@
+["not522"]

modules/hydra/build-server.nix

@@ -0,0 +1,19 @@
+{
+  lib,
+  config,
+  ...
+}:
+with lib; {
+  options.hydra.buildServer.enable = mkEnableOption "Make this device a build server";
+  config.hydra.buildServer.enable = let
+    buildServers = import ./build-server-list.nix;
+  in
+    mkDefault (any (t: t == config.networking.hostName) buildServers);
+  config.users.users.remote-build = mkIf config.hydra.buildServer.enable {
+    description = "Remote builder";
+    isNormalUser = true;
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINN5Q/L2FyB3DIgdJRYnTGHW3naw5VQ9coOdwHYmv0aZ darkkirb@thinkrac"
+    ];
+  };
+}