common.nix

@@ -104,4 +104,25 @@
       dnsutils
       busybox
   ];
+
+  # Offload builds to the media server. Excluded on the server itself to
+  # avoid a pointless SSH round-trip to localhost.
+  nix.distributedBuilds =
+    lib.mkIf (config.networking.hostName != "FredOS-Mediaserver") true;
+
+  nix.buildMachines =
+    lib.mkIf (config.networking.hostName != "FredOS-Mediaserver") [{
+      hostName          = "nordhammer.it";
+      systems           = [ "x86_64-linux" ];
+      sshUser           = "fred";
+      sshKey            = "/root/.ssh/id_ed25519";
+      maxJobs           = 4;
+      supportedFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
+    }];
+
+  # Accept unsigned paths copied back from the remote builder.
+  nix.extraOptions =
+    lib.mkIf (config.networking.hostName != "FredOS-Mediaserver") ''
+      require-sigs = false
+    '';
 }