From 8f946dd2fc4d2577fa2ae0c251a1d672bc139077 Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Thu, 24 Nov 2016 23:07:48 +0100
Subject: tv binary-cache: replace wu by xu and use hosts.binary-cache.pubkey

---
 tv/2configs/binary-cache/default.nix | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 tv/2configs/binary-cache/default.nix

(limited to 'tv/2configs/binary-cache/default.nix')

diff --git a/tv/2configs/binary-cache/default.nix b/tv/2configs/binary-cache/default.nix
new file mode 100644
index 00000000..5902f189
--- /dev/null
+++ b/tv/2configs/binary-cache/default.nix
@@ -0,0 +1,33 @@
+{ config, lib, pkgs, ... }: with import <stockholm/lib>;
+{
+  environment.etc."binary-cache.pubkey".text =
+    config.krebs.build.host.binary-cache.pubkey;
+
+  services.nix-serve = {
+    enable = true;
+    secretKeyFile = config.krebs.secret.files.binary-cache-seckey.path;
+  };
+
+  systemd.services.nix-serve = {
+    requires = ["secret.service"];
+    after = ["secret.service"];
+  };
+
+  krebs.secret.files.binary-cache-seckey = {
+    path = "/run/secret/nix-serve.key";
+    owner.name = "nix-serve";
+    source-path = toString <secrets> + "/nix-serve.key";
+  };
+
+  krebs.nginx = {
+    enable = true;
+    servers.nix-serve = {
+      server-names = [
+        "cache.${config.krebs.build.host.name}.gg23"
+      ];
+      locations = singleton (nameValuePair "/" ''
+        proxy_pass http://localhost:${toString config.services.nix-serve.port};
+      '');
+    };
+  };
+}
-- 
cgit v1.2.3