Add central Nix builder and binary cache

2026-10-06 07:08:12 +09:00 · 2026-08-31 08:07:48 +09:00
parent fda29cd08d
commit ec3770502d
21 changed files with 438 additions and 39 deletions
@@ -0,0 +1,22 @@
+{ lib, ... }:
+let
+  publicKeyFile = ./public-key;
+  hasPublicKey = builtins.pathExists publicKeyFile;
+  publicKey = if hasPublicKey then lib.removeSuffix "\n" (builtins.readFile publicKeyFile) else "";
+in
+{
+  assertions = [
+    {
+      assertion = hasPublicKey;
+      message = ''
+        systems.nix.homelab-cache requires
+        modules/systems/nix/homelab-cache/public-key
+      '';
+    }
+  ];
+
+  nix.settings = lib.mkIf hasPublicKey {
+    extra-substituters = [ "http://nix-builder:5000" ];
+    extra-trusted-public-keys = [ publicKey ];
+  };
+}