diff options
author | lassulus <lassulus@lassul.us> | 2022-09-19 11:24:47 +0200 |
---|---|---|
committer | lassulus <lassulus@lassul.us> | 2022-09-19 11:24:47 +0200 |
commit | 68bae0b2219d9f8621738062ef9db1703f6e8ca9 (patch) | |
tree | 3ff0ee80d273d4ba22e7957e8bfbab9849b87738 /tv/2configs/binary-cache | |
parent | e5aa44907512f0ba97def7549e199d365ff29db6 (diff) | |
parent | d76cf33d1f000389558da8c8f5e17db966b8a5a7 (diff) |
Merge remote-tracking branch 'ni/master'
Diffstat (limited to 'tv/2configs/binary-cache')
-rw-r--r-- | tv/2configs/binary-cache/default.nix | 24 |
1 files changed, 8 insertions, 16 deletions
diff --git a/tv/2configs/binary-cache/default.nix b/tv/2configs/binary-cache/default.nix index f6eaba36f..58791f4f6 100644 --- a/tv/2configs/binary-cache/default.nix +++ b/tv/2configs/binary-cache/default.nix @@ -3,24 +3,15 @@ environment.etc."binary-cache.pubkey".text = config.krebs.build.host.binary-cache.pubkey; + nixpkgs.overlays = [ + (self: super: { + nix-serve = self.haskellPackages.nix-serve-ng; + }) + ]; + services.nix-serve = { enable = true; - secretKeyFile = config.krebs.secret.files.binary-cache-seckey.path; - }; - - systemd.services.nix-serve = { - after = [ - config.krebs.secret.files.binary-cache-seckey.service - ]; - partOf = [ - config.krebs.secret.files.binary-cache-seckey.service - ]; - }; - - krebs.secret.files.binary-cache-seckey = { - path = "/run/secret/nix-serve.key"; - owner.name = "nix-serve"; - source-path = toString <secrets> + "/nix-serve.key"; + secretKeyFile = toString <secrets> + "/nix-serve.key"; }; services.nginx = { @@ -28,6 +19,7 @@ virtualHosts.nix-serve = { serverAliases = [ "cache.${config.krebs.build.host.name}.hkw" + "cache.${config.krebs.build.host.name}.r" ]; locations."/".extraConfig = '' proxy_pass http://localhost:${toString config.services.nix-serve.port}; |