From 9060e8bfbe7e6165afe4f86b344e10b2b8993d7f Mon Sep 17 00:00:00 2001
From: Nathan McCarty <thatonelutenist@stranger.systems>
Date: Wed, 16 Apr 2025 19:55:38 -0400
Subject: [PATCH] Full cache setup

---
 nixos/machines/driftwood/cache.nix | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/nixos/machines/driftwood/cache.nix b/nixos/machines/driftwood/cache.nix
index 3c2ae69..58612f7 100644
--- a/nixos/machines/driftwood/cache.nix
+++ b/nixos/machines/driftwood/cache.nix
@@ -1,9 +1,20 @@
-{  config,
+{
+  config,
   lib,
   pkgs,
   ...
-  }: {
-    services.nix-serve = {
-      enable = true;
+}: {
+  services.nix-serve = {
+    enable = true;
+    package = pkgs.nix-serve-ng;
+    secretKeyFile = "/var/cache-priv-key.pem";
+  };
+
+  services.nginx.virtualHosts."nix-cache.stranger.systems" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://${config.services.nix-serve.bindAddress}:${toString config.services.nix-serve.port}";
     };
-  }
+  };
+}