system/modules/urbint.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

{ config, pkgs, ... }:
{
  virtualisation.docker.enable = true;

  nix = rec {
    binaryCaches = [ "https://nix.urbinternal.com" ];
    trustedBinaryCaches = binaryCaches;
    trustedUsers = [ "griffin" ];
    requireSignedBinaryCaches = false;
  };

  services.openvpn.servers.urbint = {
    config = ''
      config /root/openvpn/urbint.conf
    '';
    autoStart = false;
  };
}