testing binary cache and messing with vm networking

1 files changed, 18 insertions, 0 deletions

diff --git a/modules/nixos/binary-cache.nix b/modules/nixos/binary-cache.nix
new file mode 100644
index 0000000..609a5dc
--- /dev/null
+++ b/modules/nixos/binary-cache.nix
@@ -0,0 +1,18 @@
+{config, ... }: {
+  services.nix-serve = {
+    enable = true;
+    secretKeyFile = "/var/secrets/cache-private-key.pem";
+  };
+
+  services.nginx = {
+    enable = true;
+    recommendedProxySettings = true;
+    virtualHosts.cache = {
+      locations."/".proxyPass = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    config.services.nginx.defaultHTTPListenPort
+  ];
+}