Add HTTPS nix cache to hydra

This commit is contained in:
Vili Sinervä 2025-06-13 13:24:14 +03:00
parent 11c996a69c
commit e48938d43d
Signed by: Vili Sinervä
SSH key fingerprint: SHA256:FladqYjaE4scJY3Hi+gnShZ6ygnTJgixy0I6BAoHyos

View file

@ -1,6 +1,7 @@
{ lib, ... }: { lib, ... }:
let let
domain = "ci.sinerva.eu"; hydra_domain = "ci.sinerva.eu";
cache_domain = "cache.sinerva.eu";
in in
{ {
imports = [ imports = [
@ -13,7 +14,7 @@ in
services = { services = {
hydra = { hydra = {
enable = true; enable = true;
hydraURL = "https://${domain}"; hydraURL = "https://${hydra_domain}";
listenHost = "localhost"; listenHost = "localhost";
notificationSender = "hydra@sinerva.eu"; notificationSender = "hydra@sinerva.eu";
port = 8080; port = 8080;
@ -25,8 +26,20 @@ in
''; '';
}; };
nginx.virtualHosts.${domain}.locations."/" = { nix-serve = {
proxyPass = "http://localhost:8080"; enable = true;
bindAddress = "127.0.0.2";
port = 8081;
secretKeyFile = "/persist/secrets/priv_cache_key";
};
nginx.virtualHosts = {
${hydra_domain}.locations."/" = {
proxyPass = "http://localhost:8080";
};
${cache_domain}.locations."/" = {
proxyPass = "http://127.0.0.2:8081";
};
}; };
}; };