Finish nix-cache

services/nix-cache/build-flakes.nix

@@ -28,7 +28,7 @@ in
 {
   systemd.services."build-flakes" = {
     serviceConfig = {
-      Type = "oneshot";
+      Type = "exec";
       ExecStart = "${build-flake-script}/bin/build-flake-script";
     };
   };
@@ -36,7 +36,7 @@ in
     enable = true;
     wantedBy = [ "timers.target" ];
     timerConfig = {
-      OnCalendar = "Sun 06:00:00";
+      OnCalendar = "*-*-* *:30:00";
     };
   };
 }

services/nix-cache/default.nix

@@ -2,5 +2,7 @@
 {
   imports = [
     ./build-flakes.nix
+    ./nix-serve.nix
+    ./proxy.nix
   ];
 }

services/nix-cache/nix-serve.nix

@@ -0,0 +1,12 @@
+{ pkgs, config, ... }:
+{
+  sops.secrets."cache-secret" = {
+    sopsFile = ../../secrets/nix-cache01/cache-secret;
+    format = "binary";
+  };
+  services.nix-serve = {
+    enable = true;
+    package = pkgs.nix-serve-ng;
+    secretKeyFile = config.sops.secrets.cache-secret.path;
+  };
+}

services/nix-cache/proxy.nix

@@ -0,0 +1,18 @@
+{ pkgs, ... }:
+{
+  services.caddy = {
+    enable = true;
+    configFile = pkgs.writeText "Caddyfile" ''
+      {
+        acme_ca https://ca.home.2rjus.net/acme/acme/directory
+      }
+
+      nix-cache.home.2rjus.net {
+        log {
+          output file /var/log/caddy/nzbget.log
+        }
+        reverse_proxy http://localhost:5000
+      }
+    '';
+  };
+}