Add HTTPS nix cache to hydra

This commit is contained in:
Vili Sinervä 2025-06-13 13:24:14 +03:00
parent 11c996a69c
commit a75a9489c9
Signed by: Vili Sinervä
SSH key fingerprint: SHA256:FladqYjaE4scJY3Hi+gnShZ6ygnTJgixy0I6BAoHyos

View file

@ -1,6 +1,7 @@
{ lib, ... }:
let
domain = "ci.sinerva.eu";
hydra_domain = "ci.sinerva.eu";
cache_domain = "cache.sinerva.eu";
in
{
imports = [
@ -13,7 +14,7 @@ in
services = {
hydra = {
enable = true;
hydraURL = "https://${domain}";
hydraURL = "https://${hydra_domain}";
listenHost = "localhost";
notificationSender = "hydra@sinerva.eu";
port = 8080;
@ -25,9 +26,21 @@ in
'';
};
nginx.virtualHosts.${domain}.locations."/" = {
nix-serve = {
enable = true;
bindAddress = "[::1]";
port = 8081;
secretKeyFile = "/persist/secrets/priv_cache_key";
};
nginx.virtualHosts = {
${hydra_domain}.locations."/" = {
proxyPass = "http://localhost:8080";
};
${cache_domain}.locations."/" = {
proxyPass = "http://localhost:8081";
};
};
};
nix = {