stuff

hosts/nas/hardware-configuration.nix

@@ -28,7 +28,7 @@
     fsType = "tmpfs";
     options = [
       "defaults"
-      "size=256G"
+      "size=25%"
       "mode=755"
     ];
   };

hosts/nas/nix-serve.nix

@@ -138,4 +138,16 @@
       RandomizedDelaySec = "1h";  # Spread load
     };
   };
+
+  nix.settings.builders-use-substitutes = true;
+  nix.distributedBuilds = true;
+  nix.buildMachines = [
+    {
+      hostName = "pi5.local";
+      system = "aarch64-linux";
+      maxJobs = 4;
+      sshUser = "matt";
+      supportedFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+    }
+  ];
 }

hosts/nas/sops.nix

@@ -62,7 +62,7 @@ in
       "ssh-keys-private/jallen-nas-root" = {
         sopsFile = ../../secrets/secrets.yaml;
         path = "/root/.ssh/id_ed25519";
-        mode = "0640";
+        mode = "0600";
       };
 
       # ------------------------------

hosts/pi4/sops.nix

@@ -5,7 +5,11 @@ in
 {
   sops = {
     defaultSopsFile = ../../secrets/pi4-secrets.yaml;
-    age.keyFile = /home/matt/.config/sops/age/keys.txt;
+    # age.keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
+    age = {
+      generateKey = true;
+      sshKeyPaths = [ "/etc/ssd/ssh_host_ed25519_key" ];
+    };
 
     # ------------------------------
     # Secrets