From 7114e72d8105032b0014b606316df2a619975a33 Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Thu, 2 Jul 2020 20:07:58 +0100 Subject: feat(whitby): Enable Nix signing for the binary cache Change-Id: I9047667cc1a40668c0c7da72c070044b91b53014 Reviewed-on: https://cl.tvl.fyi/c/depot/+/852 Reviewed-by: BuildkiteCI Reviewed-by: glittershark Tested-by: BuildkiteCI --- ops/nixos/whitby/default.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ops/nixos/whitby/default.nix b/ops/nixos/whitby/default.nix index 0791310051..d7f60a4d10 100644 --- a/ops/nixos/whitby/default.nix +++ b/ops/nixos/whitby/default.nix @@ -111,6 +111,9 @@ in systemForConfig { nix = { maxJobs = lib.mkDefault 64; + extraOptions = '' + secret-key-files = /etc/secrets/nix-cache-privkey + ''; }; programs.mtr.enable = true; -- cgit 1.4.1