make genepi a remote builder

hosts/genepi/builder.nix

@@ -0,0 +1,18 @@
+{ keys, ... }:
+let
+  username = "nixremote";
+in
+{
+  users.users."${username}" = {
+    createHome = true;
+    home = "/home/${username}";
+    isSystemUser = true;
+    group = username;
+    useDefaultShell = true;
+    openssh.authorizedKeys.keys = [ keys.hosts.haze ];
+  };
+
+  users.groups."${username}" = { };
+
+  nix.settings.trusted-users = [ username ];
+}

hosts/genepi/default.nix

@@ -11,6 +11,7 @@
     ./acme.nix
     ./backup.nix
     ./boot.nix
+    ./builder.nix
     ./disk.nix
     ./dns.nix
     ./freshrss.nix