nix-serve: init at cache.ifsr.de

This commit is contained in:
Rouven Seifert 2024-02-25 23:10:43 +01:00
parent e4bb60adff
commit a364e28bb8
Signed by untrusted user: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
3 changed files with 23 additions and 2 deletions

18
modules/nix-serve.nix Normal file
View file

@ -0,0 +1,18 @@
{ config, ... }:
let
domain = "cache.${config.networking.domain}";
in
{
sops.secrets."nix-serve/key" = { };
services.nix-serve = {
enable = true;
secretKeyFile = config.sops.secrets."nix-serve/key".path;
};
services.nginx.virtualHosts."${domain}" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.nix-serve.port}";
};
};
}