From 7bae750ce6dda37b900271e398fef2fe9d2d0022 Mon Sep 17 00:00:00 2001
From: Devin Finlinson <devin.finlinson@pm.me>
Date: Fri, 18 Jul 2025 15:11:35 -0600
Subject: testing binary cache and messing with vm networking

---
 modules/nixos/binary-cache.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 modules/nixos/binary-cache.nix

(limited to 'modules/nixos/binary-cache.nix')

diff --git a/modules/nixos/binary-cache.nix b/modules/nixos/binary-cache.nix
new file mode 100644
index 0000000..609a5dc
--- /dev/null
+++ b/modules/nixos/binary-cache.nix
@@ -0,0 +1,18 @@
+{config, ... }: {
+  services.nix-serve = {
+    enable = true;
+    secretKeyFile = "/var/secrets/cache-private-key.pem";
+  };
+
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    virtualHosts.cache = {
+      locations."/".proxyPass = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    config.services.nginx.defaultHTTPListenPort
+  ];
+}
-- 
cgit v1.2.3