Torjus Håkestad
751edfc11d
Some checks failed
Run nix flake check / flake-check (push) Has been cancelled
- Parameterize harmonia.nix to use hostname-based Vault paths - Add nix-cache services to nix-cache02 - Add Vault secret and variable for nix-cache02 signing key - Add nix-cache02 public key to trusted-public-keys on all hosts - Update plan doc to remove actions runner references Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
19 lines
461 B
Nix
19 lines
461 B
Nix
{ pkgs, config, ... }:
|
|
{
|
|
vault.secrets.cache-secret = {
|
|
secretPath = "hosts/${config.networking.hostName}/cache-secret";
|
|
extractKey = "key";
|
|
outputDir = "/run/secrets/cache-secret";
|
|
services = [ "harmonia" ];
|
|
};
|
|
|
|
services.harmonia = {
|
|
enable = true;
|
|
package = pkgs.unstable.harmonia;
|
|
signKeyPaths = [ "/run/secrets/cache-secret" ];
|
|
};
|
|
systemd.services.harmonia = {
|
|
environment.RUST_LOG = "info,actix_web=debug";
|
|
};
|
|
}
|