diff --git a/hosts/hydra-1/configuration.nix b/hosts/hydra-1/configuration.nix index 7d587f5..8eb016d 100644 --- a/hosts/hydra-1/configuration.nix +++ b/hosts/hydra-1/configuration.nix @@ -84,7 +84,7 @@ enable = true; port = 5005; bindAddress = "127.0.0.1"; - secretKeyFile = "/var/src/secrets/nix-serve/secret-key.key"; + secretKeyFile = config.age.secrets.nix-cache-key.path; # Workaround https://github.com/NixOS/nix/issues/7704#issuecomment-1409480909 package = pkgs.nix-serve-ng.override { nix = pkgs.nixVersions.nix_2_12; diff --git a/hosts/hydra-1/secrets/nix-cache-key.age b/hosts/hydra-1/secrets/nix-cache-key.age new file mode 100644 index 0000000..e017fbc --- /dev/null +++ b/hosts/hydra-1/secrets/nix-cache-key.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> ssh-ed25519 HwR33w XAZWRRep4zdbZFwRvWGa9yyLe44TlOGIMwtLo/WZXyw +G8Rv8Oqbvx5qYr8ZrQlmIyhYqUG6aJArfhMoqu4U/Uc +-> ssh-ed25519 UgSomQ sP6Z3WzhBXDaDfsSNHY7p/vV20/eytII2VhO6+vUAhE +q6+FH+k04jG0417KvY8cHnNeb8hEzEtxX+hLmKWqvdk +-> *A>\V=-grease +wpRswQ45ywiN+jit7kj5p0s2a+WloUueeu5E+Nn41WOMNQLJ3RaJqxRk +--- TVK8uHcE2tn7qfDF2oAGb24N6a670Fc+QVU7agmJYNo +_ a -'ӳAbS X2$\Mž#6wPɅ'GK&|7PՌ-v_Sb&^Yұb(K9o߉{CmF0wƣ- 9<5 L̥ \ No newline at end of file diff --git a/hosts/hydra-1/secrets/nix-cache-key.pub b/hosts/hydra-1/secrets/nix-cache-key.pub new file mode 100644 index 0000000..39ca877 --- /dev/null +++ b/hosts/hydra-1/secrets/nix-cache-key.pub @@ -0,0 +1 @@ +nix-cache.clerie.de:bAt1GJTS9BOTcXFWj3nURrSlcjqikCev9yDvqArMP5g=