rock5b as remote builder

modules/nix/default.nix

@@ -38,5 +38,18 @@
       dates = "weekly";
       options = "--delete-older-than 30d";
     };
+
+    buildMachines = [
+      {
+        hostName = "rock5b.fleet";
+        system = "aarch64-linux";
+        maxJobs = 6;
+        speedFactor = 2;
+        supportedFeatures = ["nixos-test" "benchmark" "big-parallel" "kvm"];
+        mandatoryFeatures = [];
+        sshKey = "/etc/ssh/ssh_host_ed25519_key";
+      }
+    ];
+    distributedBuilds = true;
   };
 }

modules/ssh/default.nix

@@ -1,10 +1,15 @@
 {fleetFlake, ...}: {
   services = {
     sshd.enable = true;
+
     fail2ban = {
       enable = true;
       maxretry = 10;
+      ignoreIP = [
+        "88.198.49.106"
+        "10.100.0.1/24"
+      ];
     };
   };
-  users.users.root.openssh.authorizedKeys.keys = builtins.attrValues (import "${fleetFlake}/lib").keys.users;
+  users.users.root.openssh.authorizedKeys.keys = builtins.attrValues (with (import "${fleetFlake}/lib"); keys.users // keys.hosts);
 }