Added bincache

machines/lisa/default.nix

@@ -14,6 +14,10 @@
   luj = {
     mediaserver.enable = true;
     homepage.enable = true;
+    bincache = {
+      enable = true;
+      subdomain = "bin";
+    };
     drone = {
       enable = true;
       nginx = {

modules/bincache/default.nix

@@ -0,0 +1,37 @@
+{ pkgs, config, lib, inputs, ... }:
+let
+  cfg = config.luj.bincache;
+  port = 5000;
+in
+with lib;
+{
+  options.luj.bincache = {
+    enable = mkEnableOption "Enable nix bincache";
+    subdomain = mkOption {
+      type = types.str;
+    };
+
+  };
+
+  config = mkIf cfg.enable
+    {
+      sops.secrets.bin-cache-priv-key = {
+        owner = "nix-serve";
+      };
+
+      services.nix-serve = {
+        enable = true;
+        secretKeyFile = "/run/secrets/bin-cache-priv-key";
+        port = port;
+      };
+      
+      luj.nginx.enable = true;
+      services.nginx.virtualHosts."${cfg.subdomain}.julienmalka.me" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://localhost:${toString port}";
+        };
+      };
+    };
+}

modules/nix/default.nix

@@ -25,6 +25,14 @@ with lib;
         nixPath = [
           "nixpkgs=${inputs.nixpkgs}"
         ]; 
+        binaryCaches = [
+          "https://bin.julienmalka.me"
+          "https://cache.nixos.org/"
+        ];
+        binaryCachePublicKeys = [
+          "bin.julienmalka.me:y0uADfX8ZQ6Pthofm8Pj7v+hED3m2cY0d+Sg6/Jm+s8="
+        ];
+
       };