Revive the bismuth cache!

Signed-off-by: Mel <mel@rnrd.eu>

1 files changed, 23 insertions, 0 deletions

diff --git a/modules/binary-cache.nix b/modules/binary-cache.nix
new file mode 100644
index 0000000..431532a
--- /dev/null
+++ b/modules/binary-cache.nix
@@ -0,0 +1,23 @@
+# the public key for the current iteration of this cache is:
+# bismuth-1:Fkyzfd9gfMUVKq/KfNClHaB2rUiAGtXTzYu96oZteKQ=
+
+{ unstablePkgs, ... }:
+
+let
+  # bismuth's tailnet address
+  cacheAddress = "100.85.58.31:3000";
+in
+{
+  services.harmonia = {
+    enable = true;
+    # 24.11 does not include built-in zstd compression for harmonia yet.
+    package = unstablePkgs.harmonia;
+    # TODO: secrets...
+    signKeyPaths = [ "/var/bismuth-binary-cache-key.pem" ];
+
+    settings = {
+      bind = cacheAddress;
+      priority = 50; # lower priority than `cache.nixos.org`
+    };
+  };
+}