about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2020-07-02T19·07+0100
committertazjin <mail@tazj.in>2020-07-02T20·54+0000
commit7114e72d8105032b0014b606316df2a619975a33 (patch)
tree00fce4d3dbe51fe13f8ff3d24a6bd77064770912
parentcabdd4aa51d5c1eb4ef7f7b9f63497ea252cc715 (diff)
feat(whitby): Enable Nix signing for the binary cache r/1170
Change-Id: I9047667cc1a40668c0c7da72c070044b91b53014
Reviewed-on: https://cl.tvl.fyi/c/depot/+/852
Reviewed-by: BuildkiteCI
Reviewed-by: glittershark <grfn@gws.fyi>
Tested-by: BuildkiteCI
-rw-r--r--ops/nixos/whitby/default.nix3
1 files changed, 3 insertions, 0 deletions
diff --git a/ops/nixos/whitby/default.nix b/ops/nixos/whitby/default.nix
index 0791310051..d7f60a4d10 100644
--- a/ops/nixos/whitby/default.nix
+++ b/ops/nixos/whitby/default.nix
@@ -111,6 +111,9 @@ in systemForConfig {
 
   nix = {
     maxJobs = lib.mkDefault 64;
+    extraOptions = ''
+      secret-key-files = /etc/secrets/nix-cache-privkey
+    '';
   };
 
   programs.mtr.enable = true;