5551d0ea5e
Deploys Harmonia on build01, proxied through public01. We cannot serve from build01 directly because it only supports IPv6. Closes: https://git.snix.dev/snix/snix/issues/66 Change-Id: Iff3c16366d60c0fbfd1315a18c27fcd636a0261a Reviewed-on: https://cl.snix.dev/c/snix/+/30274 Reviewed-by: Florian Klink <flokli@flokli.de> Tested-by: besadii Autosubmit: Ilan Joselevich <personal@ilanjoselevich.com> Reviewed-by: Ilan Joselevich <personal@ilanjoselevich.com>
13 lines
414 B
Nix
13 lines
414 B
Nix
{ config, depot, ... }:
|
|
|
|
{
|
|
age.secrets.binary-cache-key.file = depot.ops.secrets."binary-cache-key.age";
|
|
|
|
services.harmonia = {
|
|
enable = true;
|
|
signKeyPaths = [ config.age.secrets.binary-cache-key.path ];
|
|
# Set priority to be slightly lower than cache.nixos.org.
|
|
# This makes it so we only substitute from our binary cache stuff that's not in cache.nixos.org.
|
|
settings.priority = 41;
|
|
};
|
|
}
|