Add serve-store

hosts/hera/configuration.nix

@@ -20,6 +20,7 @@ in {
     ../../system/email2matrix.nix
     ../../system/matrix-synapse.nix
     ../../system/coturn.nix
+    ../../system/serve-store.nix
     ./web.nix
     ./borg.nix
     ./mail.nix
@@ -33,12 +34,6 @@ in {
     host = "hera-intern:9100";
   }];
 
-  nix.sshServe = {
-    enable = true;
-    keys = me.keys ++ me.backupkeys;
-    protocol = "ssh-ng";
-  };
-
   services = {
     borgbackup.jobs.data = {
       doInit = false;

system/serve-store.nix

@@ -0,0 +1,19 @@
+{ config, ... }: {
+  services = {
+    nix-serve = {
+      enable = true;
+      secretKeyFile = "/var/cache-priv-key.pem";
+    };
+    nginx = {
+      enable = true;
+      virtualHosts."binarycache" = {
+        listen = [{
+          addr = "[::]";
+          port = 5001;
+        }];
+        locations."/".proxyPass =
+          "http://127.0.0.1:${toString config.services.nix-serve.port}";
+      };
+    };
+  };
+}