mauville: enable binary cache

alyraffauf · Jul 8, 2024 · 9579d6f · 9579d6f
1 parent ee2c828
commit 9579d6f
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/hosts/mauville/default.nix b/hosts/mauville/default.nix
@@ -33,6 +33,8 @@ in {
       file = ../../secrets/lastFM/secret.age;
     };
 
+    nixCache.file = ../../secrets/nixCache/privKey.age;
+
     spotifyId = {
       owner = "navidrome";
       file = ../../secrets/spotify/clientId.age;
@@ -60,6 +62,23 @@ in {
   networking.hostName = "mauville";
 
   services = {
+    ddclient.domains = ["nixcache.${domain}"];
+    nginx = {
+      virtualHosts."nixcache.${domain}" = {
+        enableACME = true;
+        forceSSL = true;
+
+        locations."/".proxyPass = "http://${config.services.nix-serve.bindAddress}:${
+          toString config.services.nix-serve.port
+        }";
+      };
+    };
+
+    nix-serve = {
+      enable = true;
+      secretKeyFile = config.age.secrets.nixCache.path;
+    };
+
     samba = {
       enable = true;
       openFirewall = true;