diff options
| author | Vincent Ambo <mail@tazj.in> | 2021-04-04T18·24+0200 |
|---|---|---|
| committer | tazjin <mail@tazj.in> | 2021-04-04T18·54+0000 |
| commit | 0f1d3de26f252daff8c88d62e29d08c1548e4d3e (patch) | |
| tree | 00eec561072b84e76aea2730fd87d45231ef6109 /ops | |
| parent | aae387456a7604834d463c305d9899516ec4513c (diff) | |
feat(whitby): Configure nix-serve on cache.tvl.su r/2436
Having a slow cache is better than having no cache. Change-Id: Ie3cfcd4a2937d90b0e2ad899816bc31ae806631f Reviewed-on: https://cl.tvl.fyi/c/depot/+/2847 Tested-by: BuildkiteCI Reviewed-by: lukegb <lukegb@tvl.fyi> Reviewed-by: sterni <sternenseemann@systemli.org>
Diffstat (limited to 'ops')
| -rw-r--r-- | ops/nixos/whitby/default.nix | 8 | ||||
| -rw-r--r-- | ops/nixos/www/cache.tvl.su.nix | 26 |
2 files changed, 34 insertions, 0 deletions
diff --git a/ops/nixos/whitby/default.nix b/ops/nixos/whitby/default.nix index dd8807cf72..f7d8f4ef4a 100644 --- a/ops/nixos/whitby/default.nix +++ b/ops/nixos/whitby/default.nix @@ -24,6 +24,7 @@ in lib.fix(self: { "${depot.depotPath}/ops/nixos/tvl-slapd/default.nix" "${depot.depotPath}/ops/nixos/tvl-sso/default.nix" "${depot.depotPath}/ops/nixos/www/b.tvl.fyi.nix" + "${depot.depotPath}/ops/nixos/www/cache.tvl.su.nix" "${depot.depotPath}/ops/nixos/www/cl.tvl.fyi.nix" "${depot.depotPath}/ops/nixos/www/code.tvl.fyi.nix" "${depot.depotPath}/ops/nixos/www/cs.tvl.fyi.nix" @@ -307,6 +308,13 @@ in lib.fix(self: { ]; }; + services.nix-serve = { + enable = true; + port = 6443; + secretKeyFile = "/etc/secrets/nix-cache-key.sec"; + bindAddress = "localhost"; + }; + environment.systemPackages = with nixpkgs; [ bb curl diff --git a/ops/nixos/www/cache.tvl.su.nix b/ops/nixos/www/cache.tvl.su.nix new file mode 100644 index 0000000000..182306bebf --- /dev/null +++ b/ops/nixos/www/cache.tvl.su.nix @@ -0,0 +1,26 @@ +{ config, ... }: + +{ + imports = [ + ./base.nix + ]; + + config = { + services.nginx.virtualHosts."cache.tvl.su" = { + serverName = "cache.tvl.su"; + serverAliases = [ "cache.tvl.fyi" ]; + enableACME = true; + forceSSL = true; + + extraConfig = '' + location = /cache-key.pub { + alias /etc/secrets/nix-cache-key.pub; + } + + location / { + proxy_pass http://localhost:${toString config.services.nix-serve.port}; + } + ''; + }; + }; +} |