hosts/hydra-1: Migrate from nix-serve to harmonia

configuration/common/default.nix

@@ -30,6 +30,8 @@
     auto-optimise-store = true;
     # Keep buildtime dependencies
     keep-outputs = true;
+    # Build local, when caches are broken
+    fallback = true;
   };
 
   environment.systemPackages = with pkgs; [

flake.lock

@@ -225,11 +225,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1681557730,
-        "narHash": "sha256-j2E3639kS3Qop2jQPyqWCdenZNaqIdxfoTvAHnGuAGI=",
+        "lastModified": 1693985761,
+        "narHash": "sha256-K5b+7j7Tt3+AqbWkcw+wMeqOAWyCD1MH26FPZyWXpdo=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "85b081528b937df4bfcaee80c3541b58f397df8b",
+        "rev": "0bffda19b8af722f8069d09d8b6a24594c80b352",
         "type": "github"
       },
       "original": {

hosts/hydra-1/configuration.nix

@@ -77,15 +77,10 @@
     '';
   };
 
-  services.nix-serve = {
+  services.harmonia = {
     enable = true;
-    port = 5005;
-    bindAddress = "127.0.0.1";
-    secretKeyFile = config.age.secrets.nix-cache-key.path;
-    # Workaround https://github.com/NixOS/nix/issues/7704#issuecomment-1409480909
-    package = pkgs.nix-serve-ng.override {
-      nix = pkgs.nixVersions.nix_2_12;
-    };
+    settings.bind = "[::1]:5005";
+    signKeyPath = config.age.secrets.nix-cache-key.path;
   };
 
   services.nginx.enable = true;
@@ -109,7 +104,13 @@
         '';
       };
       locations."/" = {
-        proxyPass = "http://127.0.0.1:5005";
+        proxyPass = "http://[::1]:5005";
+        extraConfig = ''
+          proxy_redirect http:// https://;
+          proxy_http_version 1.1;
+          proxy_set_header Upgrade $http_upgrade;
+          proxy_set_header Connection $connection_upgrade;
+        '';
       };
     };
   };