Torjus Håkestad
75210805d5
Some checks failed
Run nix flake check / flake-check (push) Has been cancelled
Removed:
- hosts/nix-cache01/ directory
- services/nix-cache/build-flakes.{nix,sh} (replaced by NATS builder)
- Vault secret and AppRole for nix-cache01
- Old signing key variable from terraform
- Old trusted public key from system/nix.nix
Updated:
- flake.nix: removed nixosConfiguration
- README.md: nix-cache01 -> nix-cache02
- Monitoring rules: removed build-flakes alerts, updated harmonia to nix-cache02
- Simplified proxy.nix (no longer needs hostname conditional)
nix-cache02 is now the sole binary cache host.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
26 lines
485 B
Nix
26 lines
485 B
Nix
{ pkgs, ... }:
|
|
{
|
|
services.caddy = {
|
|
enable = true;
|
|
package = pkgs.unstable.caddy;
|
|
configFile = pkgs.writeText "Caddyfile" ''
|
|
{
|
|
acme_ca https://vault.home.2rjus.net:8200/v1/pki_int/acme/directory
|
|
metrics
|
|
}
|
|
|
|
|
|
nix-cache.home.2rjus.net {
|
|
log {
|
|
output file /var/log/caddy/nix-cache.log {
|
|
mode 644
|
|
}
|
|
}
|
|
metrics /metrics
|
|
|
|
reverse_proxy http://localhost:5000
|
|
}
|
|
'';
|
|
};
|
|
}
|