all repos — nixfiles @ d2ad59e9bdaa4dddba01079ab8176bcfb2cfddea

System and user configuration, managed by nix and home-manager

system/roles/binary-cache.nix (view raw)

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
{
  config,
  pkgs,
  ...
}:
let
  ns = config.services.nix-serve;
in
{
  age.secrets.binarycache.file = ../../secrets/binarycache.age;

  services.nix-serve = {
    enable = true;
    package = pkgs.nix-serve-ng;
    secretKeyFile = config.age.secrets.binarycache.path;
  };

  services.caddy.virtualHosts."binarycache.${config.networking.domain}" = {
    extraConfig = ''
      reverse_proxy ${ns.bindAddress}:${toString ns.port}
    '';
  };

  users.users.nixremote.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIy9jFioBvV0JA0lc+De2N+vDOABGHgCECW6vkD33CE4 sourcehut"
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIII7sWEwsm8JZiJ0LUnjSt0Kg1RXypG6p5AzP/R2n5ca actions@github.com"
  ];
}