diff options
author | makefu <github@syntax-fehler.de> | 2016-02-28 02:26:44 +0100 |
---|---|---|
committer | makefu <github@syntax-fehler.de> | 2016-02-28 02:26:44 +0100 |
commit | db72d5911f1556d3b1cfbe8f1a2d8f6765728952 (patch) | |
tree | ab12aafd2994c265cd4fd604e554b2e8db2da021 /tv/2configs/wu-binary-cache | |
parent | 64a1dc64a3a7daf57e1ebc677e35c4dc89d9c36b (diff) | |
parent | 8c859335a879c515a1415bc8b15b5cb7eb519efc (diff) |
Merge remote-tracking branch 'cd/master'
Diffstat (limited to 'tv/2configs/wu-binary-cache')
-rw-r--r-- | tv/2configs/wu-binary-cache/client.nix | 7 | ||||
-rw-r--r-- | tv/2configs/wu-binary-cache/default.nix | 25 |
2 files changed, 32 insertions, 0 deletions
diff --git a/tv/2configs/wu-binary-cache/client.nix b/tv/2configs/wu-binary-cache/client.nix new file mode 100644 index 00000000..9634c21d --- /dev/null +++ b/tv/2configs/wu-binary-cache/client.nix @@ -0,0 +1,7 @@ +_: +{ + nix = { + binaryCaches = ["http://cache.wu.gg23"]; + binaryCachePublicKeys = ["cache.wu-1:cdhA201O2R2Ect463vhJFmhpMaNyT/tOvzYvtceT9q8="]; + }; +} diff --git a/tv/2configs/wu-binary-cache/default.nix b/tv/2configs/wu-binary-cache/default.nix new file mode 100644 index 00000000..6fcac21a --- /dev/null +++ b/tv/2configs/wu-binary-cache/default.nix @@ -0,0 +1,25 @@ +{ config, lib, pkgs, ... }: with config.krebs.lib; +{ + services.nix-serve = assert config.krebs.build.host.name == "wu"; { + enable = true; + secretKeyFile = config.krebs.secret.files.nix-serve-key.path; + }; + systemd.services.nix-serve = { + requires = ["secret.service"]; + after = ["secret.service"]; + }; + krebs.secret.files.nix-serve-key = { + path = "/run/secret/nix-serve.key"; + owner.name = "nix-serve"; + source-path = toString <secrets> + "/nix-serve.key"; + }; + krebs.nginx = { + enable = true; + servers.nix-serve = { + server-names = [ "cache.wu.gg23" ]; + locations = singleton (nameValuePair "/" '' + proxy_pass http://localhost:${toString config.services.nix-serve.port}; + ''); + }; + }; +} |