Basic binary cache

2023-04-29 19:52:31 -06:00
parent 0efcf8f3fc
commit 96de109d62
6 changed files with 41 additions and 0 deletions
--- a/machines/storage/s0/default.nix
+++ b/machines/storage/s0/default.nix
@@ -14,6 +14,14 @@
  boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
  nix.gc.automatic = lib.mkForce false; # allow the nix store to serve as a build cache

+  # binary cache
+  services.nix-serve = {
+    enable = true;
+    openFirewall = true;
+    secretKeyFile = "/run/agenix/binary-cache-private-key";
+  };
+  age.secrets.binary-cache-private-key.file = ../../../secrets/binary-cache-private-key.age;
+
  services.iperf3.enable = true;
  services.iperf3.openFirewall = true;