From ceeec5be416aad5b47154e622b262c394babccd9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?m=C3=BCde?= <git@darkest.space>
Date: Sat, 2 May 2026 11:48:32 +0200
Subject: [PATCH] distributed builds: fix ssh only accepting build key

---
 nixosModules/distributed-builds.nix | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/nixosModules/distributed-builds.nix b/nixosModules/distributed-builds.nix
index 1d0a55e..7d5df6e 100644
--- a/nixosModules/distributed-builds.nix
+++ b/nixosModules/distributed-builds.nix
@@ -103,8 +103,7 @@ in
         programs.ssh = {
           knownHosts = buildServerKnownHosts;
           extraConfig = ''
-            Host ${lib.concatStringsSep " " (lib.attrNames buildServerDevices)}
-              User ${buildUser}
+            Match Host ${lib.concatStringsSep " " (lib.attrNames buildServerDevices)} User ${buildUser}
               IdentityFile ${clientSshKeyPath}
               IdentitiesOnly yes
           '';