smarter nix-serve

This commit is contained in:
Gerg-L 2025-02-25 17:35:43 -05:00
parent fadc34f4a8
commit c498b867f9
Signed by: gerg-l
SSH key fingerprint: SHA256:FPYDHIkvMocr4wdmZXpgpJjsb2Tw6rASs2ISPbOb0KI

View file

@ -1,4 +1,8 @@
{ config, pkgs }: {
config,
pkgs,
lib,
}:
{ {
sops.secrets.store_key.owner = "nix-serve"; sops.secrets.store_key.owner = "nix-serve";
@ -48,30 +52,23 @@
path = [ path = [
config.nix.package config.nix.package
pkgs.bzip2 pkgs.bzip2
pkgs.nix-serve-ng
]; ];
serviceConfig = {
ExecStart = "${lib.getExe pkgs.nix-serve-ng} --socket /run/nix-serve/nix-serve.sock";
Restart = "always";
RestartSec = "5s";
User = "nix-serve";
Group = "nix-serve";
RuntimeDirectory = "nix-serve";
UMask = "0117";
};
environment = { environment = {
NIX_REMOTE = "daemon"; NIX_REMOTE = "daemon";
NIX_SECRET_KEY_FILE = config.sops.secrets.store_key.path; NIX_SECRET_KEY_FILE = config.sops.secrets.store_key.path;
}; };
script = ''
nix-serve --socket /run/nix-serve/nix-serve.sock &
PID=$!
sleep 1
chmod 660 /run/nix-serve/nix-serve.sock
wait "$PID"
'';
serviceConfig = {
Restart = "always";
RestartSec = "5s";
User = "nix-serve";
Group = "nix-serve";
}; };
};
systemd.tmpfiles.rules = [ "d /run/nix-serve - nix-serve nix-serve - -" ];
local.nginx.proxyVhosts."cache.gerg-l.com" = "http://unix:/run/nix-serve/nix-serve.sock"; local.nginx.proxyVhosts."cache.gerg-l.com" = "http://unix:/run/nix-serve/nix-serve.sock";
} }