builder: store nix-serve key in sops

2026-07-19 13:56:33 +02:00
parent 139402db48
commit e89908b592
3 changed files with 7 additions and 5 deletions
@@ -181,9 +181,10 @@
  };

  # =========== Binary Cache ==========
+  sops.secrets."nix_serve_key".sopsFile = ./secrets.yaml;
  services.nix-serve = {
    enable = true;
-    secretKeyFile = "/var/cache-priv-key.pem";
+    secretKeyFile = config.sops.secrets."nix_serve_key".path;
  };

  # =========== Binary Cache with attic ==========