From 132edabbbbb6a7305ebafedcb882fd9724772a5f Mon Sep 17 00:00:00 2001 From: Marek Paśnikowski Date: Tue, 11 Nov 2025 05:27:05 +0100 Subject: implement offloading prototype --- deployment/systems/rakan.scm | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) (limited to 'deployment/systems/rakan.scm') diff --git a/deployment/systems/rakan.scm b/deployment/systems/rakan.scm index 93100c2..c952472 100644 --- a/deployment/systems/rakan.scm +++ b/deployment/systems/rakan.scm @@ -31,7 +31,8 @@ #:use-module ( (sovereign systems) #:prefix sovereign:systems:) #:use-module ( (users id1000) - #:prefix users:id1000:)) + #:prefix users:id1000:) + #:use-module (guix gexp)) (define system-name "rakan") @@ -60,6 +61,12 @@ (inherit sovereign:devices:swap/no-trim) (target l-target)))) +(define guix-offload-authorizations + (let + ( (l-mcdowell-key (local-file "../keys/guix/mcdowell-signing-key.pub"))) + (gnu:services:base:guix-extension + (authorized-keys (list l-mcdowell-key))))) + (define guix-publish-configuration (gnu:services:base:guix-publish-configuration (host "0.0.0.0") @@ -83,6 +90,9 @@ gnu:system:linux-initrd:%base-initrd-modules)) (l-services (cons* l-guix-home-service guix-publish-service + (gnu:services:simple-service 'offload-authorizations + gnu:services:base:guix-service-type + guix-offload-authorizations) (gnu:services:service gnu:services:ssh:openssh-service-type) sovereign:packages:protonmail:nogui-profile sovereign:systems:%sovereign-services)) -- cgit v1.2.3