workaround elctron issues, fix firewall for syncthing, set uphostkey0 as builder to steveej-t14

nix/os/devices/sj-bm-hostkey0/configuration.nix

@@ -11,11 +11,11 @@
   ...
 }: {
   disabledModules = [
-    # "services/networking/hostapd.nix"
   ];
 
   imports = [
     nodeFlake.inputs.disko.nixosModules.disko
+    nodeFlake.inputs.srvos.nixosModules.roles-nix-remote-builder
     repoFlake.inputs.sops-nix.nixosModules.sops
 
     ../../profiles/common/user.nix
@@ -35,8 +35,19 @@
         inherit pkgs;
       };
 
-      home-manager.users.steveej = import ../../../home-manager/configuration/text-minimal.nix {
-        inherit pkgs;
+      home-manager.users.steveej = { pkgs, ... }: {
+        imports = [
+          ../../../home-manager/configuration/text-minimal.nix
+        ];
+
+        home.packages = [
+          pkgs.nil
+          pkgs.rnix-lsp
+          pkgs.nixd
+          pkgs.nixpkgs-fmt
+          pkgs.alejandra
+          pkgs.nixfmt
+        ];
       };
 
       programs.zsh.enable = true;
@@ -45,6 +56,11 @@
     }
   ];
 
+  roles.nix-remote-builder.schedulerPublicKeys = [
+    # TODO: make this a reference to the private key's secret
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC8FHuK0k86iBWq41+NAhVwJqH1ZpGJe+q01m7iLviz6 root@steveej-t14"
+  ];
+
   services.openssh.enable = true;
   services.openssh.settings.PermitRootLogin = "yes";
 
@@ -141,4 +157,10 @@
   #   home.packages = with pkgs; [
   #   ];
   # };
+
+  virtualisation.libvirtd.enable = true;
+
+  boot.binfmt.emulatedSystems = [
+    "aarch64-linux"
+  ];
 }

nix/os/devices/sj-bm-hostkey0/flake.nix

@@ -59,15 +59,6 @@
       native = mkNixosConfiguration {
         inherit system;
       };
-
-      # cross = mkNixosConfiguration {
-      #   extraModules = [
-      #     {
-      #       nixpkgs.buildPlatform.system = "x86_64-linux";
-      #       nixpkgs.hostPlatform.system = system;
-      #     }
-      #   ];
-      # };
     };
   };
 }