clerie/nixfiles
1
0
Fork 0
Code Activity

hosts/hydra-1: Sign nix cache entries with multiple keys

Browse Source
This commit is contained in:
clerie
2024-05-22 17:17:14 +02:00
parent d55dc35882
commit 37685080b9
5 changed files with 90 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
hosts/hydra-1/nix-cache.nix
View File

@@ -5,7 +5,18 @@
services.harmonia = {
enable = true;
settings.bind = "[::1]:5005";
signKeyPath = config.sops.secrets.nix-cache-key.path;
};
systemd.services.harmonia = {
environment = {
SIGN_KEY_PATHS = "%d/key1 %d/key2";
};
serviceConfig = {
LoadCredential = [
"key1:${config.sops.secrets."sign-key-nix-cache.clerie.de".path}"
"key2:${config.sops.secrets."sign-key-cache.nix.clerie.de".path}"
];
};
};
services.nginx.virtualHosts = {