maurice/snix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(ops): Deploy harmonia on cache.snix.dev

Browse source 
Deploys Harmonia on build01, proxied through public01.
We cannot serve from build01 directly because it only supports IPv6.

Closes: https://git.snix.dev/snix/snix/issues/66
Change-Id: Iff3c16366d60c0fbfd1315a18c27fcd636a0261a
Reviewed-on: https://cl.snix.dev/c/snix/+/30274
Reviewed-by: Florian Klink <flokli@flokli.de>
Tested-by: besadii
Autosubmit: Ilan Joselevich <personal@ilanjoselevich.com>
Reviewed-by: Ilan Joselevich <personal@ilanjoselevich.com>
This commit is contained in:
Ilan Joselevich 2025-03-24 18:21:41 +00:00
parent 6f9c54bbd1
commit 5551d0ea5e
7 changed files with 49 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
ops/modules/harmonia.nix Normal file
View file

@ -0,0 +1,13 @@
{ config, depot, ... }:
{
age.secrets.binary-cache-key.file = depot.ops.secrets."binary-cache-key.age";
services.harmonia = {
enable = true;
signKeyPaths = [ config.age.secrets.binary-cache-key.path ];
# Set priority to be slightly lower than cache.nixos.org.
# This makes it so we only substitute from our binary cache stuff that's not in cache.nixos.org.
settings.priority = 41;
};
}