From ba9822b3a4b74f7415caf7de38aab5dc03db67bd Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Thu, 24 Nov 2016 23:07:48 +0100
Subject: tv binary-cache: replace wu by xu and use hosts.binary-cache.pubkey

---
 tv/1systems/nomic.nix                   |  1 -
 tv/1systems/wu.nix                      |  1 -
 tv/1systems/xu.nix                      |  2 +-
 tv/1systems/zu.nix                      |  1 -
 tv/2configs/binary-cache/default.nix    | 33 +++++++++++++++++++++++++++++++++
 tv/2configs/wu-binary-cache/client.nix  |  7 -------
 tv/2configs/wu-binary-cache/default.nix | 25 -------------------------
 7 files changed, 34 insertions(+), 36 deletions(-)
 create mode 100644 tv/2configs/binary-cache/default.nix
 delete mode 100644 tv/2configs/wu-binary-cache/client.nix
 delete mode 100644 tv/2configs/wu-binary-cache/default.nix

diff --git a/tv/1systems/nomic.nix b/tv/1systems/nomic.nix
index 6669b5d..7d6a1d6 100644
--- a/tv/1systems/nomic.nix
+++ b/tv/1systems/nomic.nix
@@ -15,7 +15,6 @@ with import <stockholm/lib>;
     ../2configs/nginx/public_html.nix
     ../2configs/pulse.nix
     ../2configs/retiolum.nix
-    ../2configs/wu-binary-cache/client.nix
     ../2configs/xserver
   ];
 
diff --git a/tv/1systems/wu.nix b/tv/1systems/wu.nix
index 19db559..d5be57b 100644
--- a/tv/1systems/wu.nix
+++ b/tv/1systems/wu.nix
@@ -16,7 +16,6 @@ with import <stockholm/lib>;
     ../2configs/nginx/public_html.nix
     ../2configs/pulse.nix
     ../2configs/retiolum.nix
-    ../2configs/wu-binary-cache
     ../2configs/xserver
     {
       environment.systemPackages = with pkgs; [
diff --git a/tv/1systems/xu.nix b/tv/1systems/xu.nix
index a7e0b83..b6fe6dc 100644
--- a/tv/1systems/xu.nix
+++ b/tv/1systems/xu.nix
@@ -15,7 +15,7 @@ with import <stockholm/lib>;
     ../2configs/nginx/public_html.nix
     ../2configs/pulse.nix
     ../2configs/retiolum.nix
-    ../2configs/wu-binary-cache/client.nix
+    ../2configs/binary-cache
     ../2configs/xserver
     ../2configs/xu-qemu0.nix
     {
diff --git a/tv/1systems/zu.nix b/tv/1systems/zu.nix
index 056652e..59e8b1c 100644
--- a/tv/1systems/zu.nix
+++ b/tv/1systems/zu.nix
@@ -21,7 +21,6 @@ with import <stockholm/lib>;
     ../2configs/nginx/public_html.nix
     ../2configs/pulse.nix
     ../2configs/retiolum.nix
-    ../2configs/wu-binary-cache/client.nix
     ../2configs/xserver
     {
       environment.systemPackages = with pkgs; [
diff --git a/tv/2configs/binary-cache/default.nix b/tv/2configs/binary-cache/default.nix
new file mode 100644
index 0000000..5902f18
--- /dev/null
+++ b/tv/2configs/binary-cache/default.nix
@@ -0,0 +1,33 @@
+{ config, lib, pkgs, ... }: with import <stockholm/lib>;
+{
+  environment.etc."binary-cache.pubkey".text =
+    config.krebs.build.host.binary-cache.pubkey;
+
+  services.nix-serve = {
+    enable = true;
+    secretKeyFile = config.krebs.secret.files.binary-cache-seckey.path;
+  };
+
+  systemd.services.nix-serve = {
+    requires = ["secret.service"];
+    after = ["secret.service"];
+  };
+
+  krebs.secret.files.binary-cache-seckey = {
+    path = "/run/secret/nix-serve.key";
+    owner.name = "nix-serve";
+    source-path = toString <secrets> + "/nix-serve.key";
+  };
+
+  krebs.nginx = {
+    enable = true;
+    servers.nix-serve = {
+      server-names = [
+        "cache.${config.krebs.build.host.name}.gg23"
+      ];
+      locations = singleton (nameValuePair "/" ''
+        proxy_pass http://localhost:${toString config.services.nix-serve.port};
+      '');
+    };
+  };
+}
diff --git a/tv/2configs/wu-binary-cache/client.nix b/tv/2configs/wu-binary-cache/client.nix
deleted file mode 100644
index 9634c21..0000000
--- a/tv/2configs/wu-binary-cache/client.nix
+++ /dev/null
@@ -1,7 +0,0 @@
-_:
-{
-  nix = {
-    binaryCaches = ["http://cache.wu.gg23"];
-    binaryCachePublicKeys = ["cache.wu-1:cdhA201O2R2Ect463vhJFmhpMaNyT/tOvzYvtceT9q8="];
-  };
-}
diff --git a/tv/2configs/wu-binary-cache/default.nix b/tv/2configs/wu-binary-cache/default.nix
deleted file mode 100644
index f039a55..0000000
--- a/tv/2configs/wu-binary-cache/default.nix
+++ /dev/null
@@ -1,25 +0,0 @@
-{ config, lib, pkgs, ... }: with import <stockholm/lib>;
-{
-  services.nix-serve = assert config.krebs.build.host.name == "wu"; {
-    enable = true;
-    secretKeyFile = config.krebs.secret.files.nix-serve-key.path;
-  };
-  systemd.services.nix-serve = {
-    requires = ["secret.service"];
-    after = ["secret.service"];
-  };
-  krebs.secret.files.nix-serve-key = {
-    path = "/run/secret/nix-serve.key";
-    owner.name = "nix-serve";
-    source-path = toString <secrets> + "/nix-serve.key";
-  };
-  krebs.nginx = {
-    enable = true;
-    servers.nix-serve = {
-      server-names = [ "cache.wu.gg23" ];
-      locations = singleton (nameValuePair "/" ''
-        proxy_pass http://localhost:${toString config.services.nix-serve.port};
-      '');
-    };
-  };
-}
-- 
cgit v1.2.3