nix builder

2026-10-06 04:08:12 +09:00 · 2026-09-03 04:32:47 +09:00
parent cc3798a7b2
commit d4721d1d22
3 changed files with 73 additions and 0 deletions
@@ -0,0 +1,37 @@
+_:
+
+{
+  sops.secrets.nix-cache-signing-key = {
+    mode = "0400";
+  };
+
+  nix.settings = {
+    build-dir = "/var/lib/nix-build";
+
+    secret-key-files = [
+      "/var/lib/secrets/nix-cache-signing-key"
+    ];
+
+    auto-optimise-store = false;
+    keep-outputs = false;
+    keep-derivations = true;
+  };
+
+  services.harmonia.cache = {
+    enable = true;
+
+    signKeyPaths = [
+      "/var/lib/secrets/nix-cache-signing-key"
+    ];
+
+    settings = {
+      bind = "[::]:5000";
+      priority = 30;
+      workers = 4;
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    5000
+  ];
+}