all repos — nixfiles @ 1f0b124cdb532d6de22843c2ca731b72ee1c02b3

System and user configuration, managed by nix and home-manager

extract binary cache role

Alin
commit

1f0b124cdb532d6de22843c2ca731b72ee1c02b3

parent

78db0c79f0e4b37ce16b5c468b52526dab2e2e31

1 file changed, 23 insertions(+), 0 deletions(-)

changed files
A system/roles/binary-cache.nix
@@ -0,0 +1,23 @@
+{ + config, + pkgs, + ... +}: +let + ns = config.services.nix-serve; +in +{ + age.secrets.binarycache.file = ../../secrets/binarycache.age; + + services.nix-serve = { + enable = true; + package = pkgs.nix-serve-ng; + secretKeyFile = config.age.secrets.binarycache.path; + }; + + services.caddy.virtualHosts."binarycache.${config.networking.domain}" = { + extraConfig = '' + reverse_proxy ${ns.bindAddress}:${toString ns.port} + ''; + }; +}