nix cache

modules/features/services/default.nix

@@ -2,6 +2,7 @@
   imports = [
     ./container.nix
     ./kde.nix
+    ./nixcache-oci.nix
     ./quem-guest.nix
   ];
 }

modules/features/services/nixcache-oci.nix

@@ -0,0 +1,17 @@
+{
+  lib,
+  config,
+  ...
+}:
+let
+  cfg = config.my.features.services.nixcacheOci;
+in
+{
+  options.my.features.services.nixcacheOci = {
+    enable = lib.mkEnableOption "Nix binary cache backed by public GHCR";
+  };
+
+  config = lib.mkIf cfg.enable {
+    my.system.nixcacheOci.enable = true;
+  };
+}

modules/system/default.nix

@@ -1,3 +1,4 @@
+{ inputs, ... }:
 {
   imports = [
     ./audio.nix
@@ -11,6 +12,7 @@
     ./locale.nix
     ./network
     ./nix.nix
+    ./nixcache-oci.nix
     ./power.nix
     ./quem.nix
     ./secure-boot.nix
@@ -18,5 +20,6 @@
     ./user
     ./version.nix
     ./secret.nix
+    inputs.nixcache-oci.nixosModules.default
   ];
 }

modules/system/nixcache-oci.nix

@@ -0,0 +1,27 @@
+{
+  lib,
+  config,
+  ...
+}:
+let
+  cfg = config.my.system.nixcacheOci;
+  publicKeyFile = ../../nixcache-public-key.txt;
+  publicKey =
+    if builtins.pathExists publicKeyFile then
+      lib.strings.trim (builtins.readFile publicKeyFile)
+    else
+      "";
+in
+{
+  options.my.system.nixcacheOci = {
+    enable = lib.mkEnableOption "Nix binary cache backed by the public GitHub Container Registry";
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.nixcache-proxy = {
+      enable = true;
+      repo = "moons-14/dotfiles";
+      inherit publicKey;
+    };
+  };
+}