# the public key for the current iteration of this cache is:
# bismuth-1:Fkyzfd9gfMUVKq/KfNClHaB2rUiAGtXTzYu96oZteKQ=

{ unstablePkgs, ... }:

let
  # bismuth's tailnet address
  cacheAddress = "100.85.58.31:3000";
in
{
  services.harmonia = {
    enable = true;
    # 24.11 does not include built-in zstd compression for harmonia yet.
    package = unstablePkgs.harmonia;
    # TODO: secrets...
    signKeyPaths = [ "/var/bismuth-binary-cache-key.pem" ];

    settings = {
      bind = cacheAddress;
      priority = 50; # lower priority than `cache.nixos.org`
    };
  };
}