remote-build.nix

# SPDX-FileCopyrightText: 2022-2024 TII (SSRC) and the Ghaf contributors
# SPDX-License-Identifier: Apache-2.0
{
  users.users = {
    remote-build = {
      description = "Azure ghaf infra runs external remote builds as this user";
      isNormalUser = true;
      openssh.authorizedKeys.keys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM2rhqSdifRmTwyrc3rvXWyDMznrIAAkVwhEsufLYiTp"
      ];
      extraGroups = [ ];
    };
  };
  nix.settings.trusted-users = [ "remote-build" ];
}