Add nix-cache01

2025-01-23 23:17:48 +01:00 · 2025-01-23 23:17:48 +01:00 · 1eb100d4ba
commit 1eb100d4ba
parent 8545807dd8
6 changed files with 160 additions and 61 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -11,6 +11,7 @@ keys:
  - &server_ca age1288993th0ge00reg4zqueyvmkrsvk829cs068eekjqfdprsrkeqql7mljk
  - &server_monitoring01 age1vpns76ykll8jgdlu3h05cur4ew2t3k7u03kxdg8y6ypfhsfhq9fqyurjey
  - &server_jelly01 age1hchvlf3apn8g8jq2743pw53sd6v6ay6xu6lqk0qufrjeccan9vzsc7hdfq
+  - &server_nix-cache01 age1a0477laj9sdh79wdas5v7hzk6au8fach74njg8epfw2rdht90qjsakkwd6
 creation_rules:
  - path_regex: secrets/[^/]+\.(yaml|json|env|ini)
    key_groups:
@ -27,6 +28,7 @@ creation_rules:
        - *server_ca
        - *server_monitoring01
        - *server_jelly01
+        - *server_nix-cache01
  - path_regex: secrets/ns3/[^/]+\.(yaml|json|env|ini)
    key_groups:
      - age:
--- a/flake.nix
+++ b/flake.nix
@ -247,6 +247,22 @@
            sops-nix.nixosModules.sops
          ];
        };
+        nix-cache01 = nixpkgs.lib.nixosSystem {
+          inherit system;
+          specialArgs = {
+            inherit inputs self sops-nix;
+          };
+          modules = [
+            (
+              { config, pkgs, ... }:
+              {
+                nixpkgs.overlays = [ overlay-unstable ];
+              }
+            )
+            ./hosts/nix-cache01
+            sops-nix.nixosModules.sops
+          ];
+        };
      };
    };
 }
--- a/hosts/nix-cache01/configuration.nix
+++ b/hosts/nix-cache01/configuration.nix
@ -0,0 +1,65 @@
+{
+  pkgs,
+  ...
+}:
+
+{
+  imports = [
+    ../template/hardware-configuration.nix
+
+    ../../system
+    ../../common/vm
+  ];
+
+  nixpkgs.config.allowUnfree = true;
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.grub = {
+    enable = true;
+    device = "/dev/sda";
+    configurationLimit = 3;
+  };
+
+  networking.hostName = "nix-cache01";
+  networking.domain = "home.2rjus.net";
+  networking.useNetworkd = true;
+  networking.useDHCP = false;
+  services.resolved.enable = true;
+  networking.nameservers = [
+    "10.69.13.5"
+    "10.69.13.6"
+  ];
+
+  systemd.network.enable = true;
+  systemd.network.networks."ens18" = {
+    matchConfig.Name = "ens18";
+    address = [
+      "10.69.13.15/24"
+    ];
+    routes = [
+      { Gateway = "10.69.13.1"; }
+    ];
+    linkConfig.RequiredForOnline = "routable";
+  };
+  time.timeZone = "Europe/Oslo";
+
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+  nix.settings.tarball-ttl = 0;
+  environment.systemPackages = with pkgs; [
+    vim
+    wget
+    git
+  ];
+
+  services.qemuGuest.enable = true;
+
+  # Open ports in the firewall.
+  # networking.firewall.allowedTCPPorts = [ ... ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+  # Or disable the firewall altogether.
+  networking.firewall.enable = false;
+
+  system.stateVersion = "24.05"; # Did you read the comment?
+}
--- a/hosts/nix-cache01/default.nix
+++ b/hosts/nix-cache01/default.nix
@ -0,0 +1,6 @@
+{ ... }:
+{
+  imports = [
+    ./configuration.nix
+  ];
+}
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@ -10,110 +10,119 @@ sops:
        - recipient: age1lznyk4ee7e7x8n92cq2n87kz9920473ks5u9jlhd3dczfzq4wamqept56u
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidFV0Y1VRenczQlBvbTFK
-            Y0lqcjRXNWNYSnlIZzE3NjVVMUtwTE1iZnljCkNJOE4zekdWV0M1YTduK2pKUjNp
-            T09DTmdNUzBjZmxPbC83dFZGZElxamsKLS0tIDI0YURWZitxUmc4a1UwMitOUnh1
-            UFFkR2FwYnNuYkhUR1UvRXg2ZWx6bmMKZpu3+HOuUak964zpWuiPRNo30NyoFios
-            BF/so3HhnyCsJw/XGUG9hn1/z6LJQ/UIvlIrttJuaJmHPgl2Db4s+A==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1WmRoM3lhZ1RvTDVjcjl4
+            bU9tZjZWOFJXcG96Rms2SnduZ2RkRElJQkQwCkJmbTZHc2FvRk5xTzliWHZCVFlh
+            bnFQcnBFQ2RlQmJnQzdRR2xERHYvSU0KLS0tIHlVOGtsRWdDblUrdFpINmZtYXl0
+            Y2VxbzVESi9vSzM4MStWQXFJSHg2aDgKw67BLRhD0WQbr7C2Ho+Di15WfnLPWiWb
+            MjJyyRsoKohn+E3wdaICs62oiz5Bf8dq9GBsU6VaD/8QtIudJ+hd+A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1hz2lz4k050ru3shrk5j3zk3f8azxmrp54pktw5a7nzjml4saudesx6jsl0
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArNHoxa0hlckdtdWJNdjJ5
-            VGErNCtHbjJQS3Axb09MNFJHUXNlSUFuZmtvCkRscXczbXJHdVlkWENHZjMzS2NP
-            L2EweFhNb29GTEZpQi9GN0g0U09hckUKLS0tIHpIZnQ4SG1VVEJJcm5OT3Z2eHdv
-            ZVp2aGxYdXlzWmhhbEYxVVhydm1CV0UK3EQ7MkZ+1qgccqQKy1VlzAdBdiPFLS5m
-            3ncNk10SEAVhMTQkJ64id4+adVMjpY7T+30j7Dms0SZd5L/5bpVXOw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNkNsRzlZVTJCU0FVczB5
+            Z01nZ1UwU0U0WmVOd2xmWjdiblpiUFlVWW1JCkMrR2oxQitGanZuUUtJWEdTVkRR
+            T3BiSW9qUEl2SWx4UitUT2VRb284QWcKLS0tIEJDZ1hZVEF0bnd3czk3ZXpnWGRS
+            eHVyZUg5RFhwUU9XbVRxaEcrZFNJdFkKGr7JOBWuwrHNRcW+8S8yMvBADH1VUFUr
+            V6EcaQukop0l+ZntzlYoZSXrG1TmgZpQqZIsEA0dQqwwsbiyxvMELg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1w2q4gm2lrcgdzscq8du3ssyvk6qtzm4fcszc92z9ftclq23yyydqdga5um
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxSE5xejl5djlYeTNxUUVj
-            eVQ0ZGxmdW1mZm91UmJHTDlxTlN4RDcvWFc0ClJ5cld3Sjk3ejFFOHF1dmk5dk9v
-            NG5VVVdLZUJCVzdLMitJSUxNSHJVLzAKLS0tIHdnek91SGd0K3NLZVcrSll3ekVz
-            OWFucUxVV0czV0svTU5PQ0RVQnc0em8K0DoPVwEZVe3FIok/TbcODd/7EQpq17Dt
-            RG8o9+XIw14LmuESq3DG6Qyfv5VJjOLY0NKC8/tV3nqVoIDWqnWeSw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuc3F1c2wxZVQyNS8rS2ZS
+            WHJHOWtEbWl4bm5NZVgybzUxaGkrV3I2RndvClowUEszaE55MVFnTFdpSURnbk16
+            bFlRS0FDZDZkbFdVeW13dTBaN0w2SjQKLS0tIElYNkxzTVlkWi9qbFZIclRaejN4
+            TmdjSVVVeThsUFRienI4b1RpZzVlN0UKCV8SfqIdIMS1GyUl3vBAACiMPlmGv94J
+            0qHc1cDqA2O8Fei2AKh4dT00Mw9xugRoAqANwx/vbF3vFjmC/zIs5w==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1snmhmpavqy7xddmw4nuny0u4xusqmnqxqarjmghkm5zaluff84eq5xatrd
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjUkNpK25XcE5KNmUreStL
-            Q3VwakpteGR1bGxMS25QL0hTNytBYzFNSkZBCkdPUHhPVWEyUGo2anhTdG1mU3Ju
-            TFp4RDQvaXRiYnNkWWM5NEpxMHFJdU0KLS0tIGpsR3RwU1Jxc2xEcHRTZXdIR3Rr
-            bnROZ1A2WWFoeU10bHlaZ0lXWEVCTzQKyUbRFrQOLypBXb5lwJhnwNdtnoh38A0M
-            3YgBcz4n5wQiyvYtu6LyMPjwAcwrvbcxv2VOvAUssFPG/F2tuRcPTg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwcGdBcFdHUVMva0VjRGJI
+            aGdGSW1xRk8vb3gzejBJeitBMG8xZUxVYUdvCmF3aWRlNFV3Mk5zNDF1QVdKVCtC
+            aG5UaCt2UDFibnNMemVBa1YwSEFlVW8KLS0tIGRSZG9SRXhiekVBVUtkNjY2U3RF
+            S25xejRaNWYrdTJXaUNSVlhteVpxZUEKRsec24lAlB03DoHmbDr8jSCK1HfrZ4iG
+            +nEHRut0Iz+kUyMr0PS7PdmJd31Y8aqv7TgzHGRsfmznXsE2efw2OA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age12a3nyvjs8jrwmpkf3tgawel3nwcklwsr35ktmytnvhpawqwzrsfqpgcy0q
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObXJMUmpNL2gycGsyRk11
-            anpDRmx4aDBpd1U0TithL0Nhc0NKN0x0R3lJCnRHejN2dzlvSUZDczZOVVU4NUFl
-            Z3BUcUU3ODc5S09OcG8rVjZlanZUN0kKLS0tIERhZGVRdTFuc3lxb2kzK1E2TXhR
-            WUxybjZEd29scjNGMFIwNTJndTlSZ1UKI+APT1YlrXBh/197ielo5//dO+Vx9WQD
-            PyW5hOa+TRmIFddje2A08ilafMlkCm78JhsJPWyiVWtJaxKOGL5nPQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYeWNPbVFGbXJxSk5HTDdm
+            MTlKWUErRUNoTTFQelFYNDhrOGJVUXM1REY0CmNmSU1VT1Q2Wnlpa1llVlBWd1lZ
+            cFI0bUFqRDVDUkhVUDUvNXhHZFpQZHMKLS0tIG1wSmp1b0RBRm1Rdm55UlNRV3I3
+            VUZsTXdVZUZadjhDY0VtajgyVlpFcEUKCW38fV0paaG8Ykjp4ed6EeKWJ93k86X7
+            o4mejEcwl8cjD95qHc2zG2D5H7y80vcl/Vb2UOALOf4bKWk7kw3sjw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1d2w5zece9647qwyq4vas9qyqegg96xwmg6c86440a6eg4uj6dd2qrq0w3l
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1ZXA1N1IvSDgybncyTDht
-            a01KdDNZM1ZCc3Y3SStRSEJ3dmVHSVg0MXdzCnFGbU1BeHRUVjVPeHFGVFNGc2Jh
-            OVZZWnFTbjZUa1BWWVoyUHV0NkR5UjgKLS0tIGZid0xablJoazZQNGcxamdGdGRr
-            SDhlN2ZlQjA2YTY4MXFkOTFsK0RlU1UKTnlHzKDDx1twVAxJREnKx/arQhMgYd0A
-            09SMWT4FV0XCt77GIm0DdypHPxzICcDhx36F5ayPceHNvyxkUnV8pg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIQmNTdk5HWWc1ZE54K0hw
+            dU5Qb1FoNElGQStnYW9KT3o3dzVzeGQ1eUZFCnc0U1RyNkthZlY2RE5QRU9OQzB3
+            aFVYV3JyYi91WmQ1Y2pBVVJMeWhKeHcKLS0tIHIzQ2tHb1YvUkxtaVdmc1IwNDZE
+            NXBtbUI2enJpanpaY1ZhZnU2andQZVkKejClL8wnqbRYPFUi9Vh1BJhvLpqAq9gq
+            nu+MZUpkEC4K/mn2wBQ9qMkUjpZRv0VcFFvAKIp8FqcwpjH5QWr8nw==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1gcyfkxh4fq5zdp0dh484aj82ksz66wrly7qhnpv0r0p576sn9ekse8e9ju
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5eDRkL0ErbmxXRDRIM01m
-            aEUvWkxLOEhaSVhPYk93SytVUTdla3hmUjA0ClJhL1lRbGg0UFFLUk1VMUxTZ0tr
-            bjI0OUdOT25peld2UHBEc2xFSWRvbUEKLS0tIC92Ti9RMVdTYjQvNkFPc0I4YkJw
-            bFIyWmhuSjU3VmU2UHFkT1AraVRrOTQKuFY6JdtBStLIPzc/pKA10+cznrpTbh1E
-            fApkk4lf+YXmL1wokrzwkQnN5TLf/sRR+j0rqw1jRLmWkns8mv3CJQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2UEhpNVFTNlpQdyt0cDlX
+            bkI1YnI3Y2UzMDRyZ1BmMGlSZEhsd1JuQmo4Ck4rV1Z2Z04wTmYvQmlLV1ZwVExU
+            SmIvUnBabU5ramxrMnhBL2IxZFRCOUUKLS0tIHVURnRsOU1jSW1TNFQ1d1JCeW44
+            cFU5NXRVNHJsVmpYSjJZbmFxU2ZTRHcKXedWKUhU2yLunUfr01uDyDNe7DSrQTWk
+            8aEWZEJ1JtyfcnnKLO164aRIj2YCiKXcZ+W7Xu8YeyLfHlSI+xMQ5A==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1g5luz2rtel3surgzuh62rkvtey7lythrvfenyq954vmeyfpxjqkqdj3wt8
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2bmNSa2VmZzJwbytRS1JN
-            SDhxeGViRFBDcGVWTHdWbE9ZVmE4ME9KSVNVCjJuREhHbm0wbUV2cjkzbkkvOXc1
-            Mmx6RWRWS20yY0Z2K2dRVmIyQnpHS2MKLS0tIG5wZE8rVXIxdm13TW05eW5nVWVy
-            OUQ2ZmFSWk5aYUhITHArVWV5S2U4TmMK8FYSvPx9yiuzN8WnTfelCzYHibFYaMGN
-            Ixk02MkEc8SEYmvdQJNwuaAHUe4kryG5fhHKRY2bIZBz4+y66QXPAw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtTXZGYWx5WUhGeDIzU3dv
+            Y1R3TVNZRE0zbjFldExxYksremorTmRtMHpZCnVTT2lwZ2RXUXRSM2g5NW04MVBt
+            eE90ZktFVHluSDZFYk12dURTditTMDQKLS0tIE56eUhYK1R4MzZDalJrcXA2SGVv
+            S0w2clZXbTZxYmFmcURJc25yYUd1OTQKYZv7uOaw8DsE8HM4EB4Evigm+g7APF1w
+            l5nZLEVZdaUBTnpbEoOdEZR9g1aHpV4xPcEyL+WapkPdv1DOpE81Jg==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1gq8434ku0xekqmvnseeunv83e779cg03c06gwrusnymdsr3rpufqx6vr3m
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2NW1RRWpNOEl4bkp3dXpk
-            Qnl3c2dObnNpN3RBUjhZY0tCY2M3RmkwR3cwCjFBakNQc29KYURCRXlsczNjZ3dK
-            ZjZPMkhaNmlpcWtaQlh4RllqNzliTmcKLS0tIE9IZk1SOVV5U0xTR1FCQytaaVU3
-            ckpGOWdvWWNLemJydmdWR2orZ2prdVUKeFBCToCjAyMIoXQbZa3cBMUu3zU2Wma0
-            wzTNmlN+6eqO59YCUQYXD4RKioDImgwnJgOsi+VZyx1BgbQOk0YLQg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0dWIzbWlxMlhYYWhnWG1r
+            WnJlSTZaeEQ5elZuVVJWWitIRUNzSEUrU1NzCktIaWFXN1lkeEFtTmw2dTFqY2dN
+            V3NjRlFVMExPT2FTWmh6WmduSkNqeVkKLS0tIHpJZ0Jkb0FFS0pvb05GMHNvRWRX
+            eTdlbCtyV09JcGEvbFdLU0haQTMxWHMKxVT+4B984uwhtCvBbxzK5QjFvla9yPTE
+            4m8wXWUsJmrJxuSK5I/9wLqH4DnHImODyZp8+PH3nTPmXI1TyrQLew==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1288993th0ge00reg4zqueyvmkrsvk829cs068eekjqfdprsrkeqql7mljk
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3WTdKWk1iVXNGOStVWkh2
-            d0hMRzR6NjNndTFPbWhvOGZuR2xGWTBSZDBvCjBtcm04a1pQU0N0dmp3L2dvSHo1
-            a1MvV3dha0ExZnNXNUZxR1Q2bzVsVjQKLS0tIGY0RUttamtyZ1k4a3BKaUtwblNm
-            NUkvcTk2SlN5RzVEQlhORHNXaGNLRTgK5XTn3jK+c50jbfBIo/9E7V0nx+W/KP0k
-            3vqCwX2Xn7/KsaT3UbpH7KZnovQHOA0jpmImuLRQh6HgeowYVLdKwg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNZ2FqOFhhQk1vWEg4YnZG
+            TDdzMXZzcm80UFh0dnZQUzg4dkFqVHorREY0CmV1NGttd2pDUnNxRDV4TG1DNGI1
+            WXNSUXdyUWhhK0dyRVFjOGduMi9hZncKLS0tIHZLRjNtNjVNQXVpWWhtR1h5Rkxu
+            SmcwOTVVbGZUL0JkcFZnWDlrUmF0cGMKnK/IJQqI3dnFiKtSeIQSz7cQdLeyOyBZ
+            wByn9C24M6Ah7cUuNqPUIabpmIffMkoPrE4QAw40QebIyANRGBF8PQ==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1vpns76ykll8jgdlu3h05cur4ew2t3k7u03kxdg8y6ypfhsfhq9fqyurjey
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMVFBZc0dDOXJSZDNJN0tp
-            VUY4eHNtQ1M3Y2JlYlNRZzl4THdkeis2YkNjCnRadHJqQWIzZHRLb2UyRk1hTXRU
-            RG8zS0hSNjdqc2trRnRVZkxGNmNtRDQKLS0tIFlGMWhxOVpqNmxBenR0NnozbFFF
-            ZDdBYllPSlVKeUt3Z3VWd2pyM2dpcjgKcaWnCGOtZkYIPwbX0haU3wK3BkGyzOtu
-            V3Huvk0TZVQfNVHUqdVtxKOXxl56P8Qn1d2onxiopkXZBeRjRYzZPQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrME9OcHVVL2RpQXpkZjd6
+            eVV4NUZWSFFXRFY2bmtxc3NrNWRNYU1HVUY0ClJ2OWd3U2l4V2pVUlVlOWt4Z2VC
+            ZDQvTGN1UG9NT1QrN2JrcWRuZHRlaWMKLS0tIGMrTWFPTDg4d3dFdG8vSXZaV1FZ
+            S2t3dWp5akV4TDFaZ3laTmNjRTVERm8KtOdcTpsu5TniPEiBkiNO/KQRs2P7Igat
+            2SoZpn6yIDiZEXdLX0cIlvUPrLR+ESWX/IjbgTY0P4U6RyoSqVMHkA==
            -----END AGE ENCRYPTED FILE-----
        - recipient: age1hchvlf3apn8g8jq2743pw53sd6v6ay6xu6lqk0qufrjeccan9vzsc7hdfq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ejFscERxWndHTDFqcGRz
-            VkwvcGR0VzczOFVOeklQQnhzdzAvZjRDSmw4CjRJaDRRSXFHVS9ERU4wd3RxTUlr
-            dEhmUThXSGRzWnYwWWxwdmkzbGxMZm8KLS0tIFk0NkFWbzVHVFFpU3NHNVl1dk5C
-            K0MxNDVEeHp0cnRWR3FvemliM05Cdk0KUpHyugjjbKBf3i67U8FBYFnL8Z0Htc5a
-            r+dHJEN1B+qrX0s7AH/MlQfI1GcjWZN/FTCtKoDvAjnlha3BVDQJnA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMdGp2aUJJTEJvdUpSdG85
+            eFR0K0JGZ1N0VDhYM3RZY3lhZ1dTOUduUEJvCkJzclhkdHpZWnA2LzRNZnZGQUhW
+            T0FEdWhGUk5LcHhlWk04Z0w1MHRLbHMKLS0tIEhoM2R4M0Y4MnpteWZkZUpMUjFn
+            V0tpd0NUOENqUUhzcTRyMnJNMUxLSnMKSSvydvS6LOtP0y6E1VA/MDQhAyMAMbgf
+            F3dJ0w1dmJDf9nPiXt+UWFf1cn60ulymP5YEgWJbILaSU++nG54MYw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1a0477laj9sdh79wdas5v7hzk6au8fach74njg8epfw2rdht90qjsakkwd6
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjL3Y4d0JhaEZvZ1UwL0dI
+            cXM2eHVwWFZkcFphTEIyclVIR2lFWnptK1JzClpONHlsZUIyS0krZ0V0SlZyNGJZ
+            dEVJY0dlVWsyNG1NSllOSnV3d0FVWVUKLS0tIHorVStkMllBdTJxWElRV0lpUlVG
+            VUxpR0R1QkduNlpuMFRIN0xzV1daeXMKjMWGfVy5a2UpHKrpUYkvTLJ7jIjj27q3
+            TbLu4Y83C0TUDf3fVy7CBTt5OUHY8fyhdvxh+7Che2WKSlbyTwWbvg==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2024-06-02T22:09:06Z"
    mac: ENC[AES256_GCM,data:cxJq4EMEMVEw0IUXNwtyQj4MaYIJ/Xo4OaY+3VLgIhYw6oBO9CmJxgLuXcSnGnr23oNE5OQF6ALv+vxF46D1pI0V1zhqKL6zMIs0DzPBwo7Arg166w5kGAT274jK7YWymeJ7fafWXYubLlGUthyVJS1BkvlqIhoe2BlTZ3bPyBs=,iv:Z2Uh9Oo4q/ce6DDLShs7JAX3XFNAVOGBmBPvRbGxaaU=,tag:6qZhZ4+tgtXl60b0Lx7Taw==,type:str]
--- a/services/ns/zones-home-2rjus-net.conf
+++ b/services/ns/zones-home-2rjus-net.conf
@ -1,7 +1,7 @@
 $ORIGIN home.2rjus.net.
 $TTL 1800
@       IN      SOA     ns1.home.2rjus.net.      admin.test.2rjus.net. (
-                        2045                    ; serial number
+                        2046                    ; serial number
                        3600                    ; refresh
                        900                     ; retry
                        1209600                 ; expire
@ -56,6 +56,7 @@ http-proxy          IN      A       10.69.13.11
 ca                  IN      A       10.69.13.12
 monitoring01        IN      A       10.69.13.13
 jelly01             IN      A       10.69.13.14
+nix-cache01         IN      A       10.69.13.15

 ; http-proxy cnames
 nzbget              IN      CNAME   http-proxy