nix-serve added

.gitignore

@@ -0,0 +1 @@
+.vscode

modules/essentials/settings.nix

@@ -15,6 +15,7 @@
     settings = {
       require-sigs = false;
       substituters = [
+        "http://100.64.0.0:5000"
         "https://cache.nixos.org"
         "https://nix-community.cachix.org"
         "https://mirror.yandex.ru/nixos"
@@ -26,10 +27,11 @@
         # "https://nixos.snix.store" # https://nixos.snix.store/
       ];
       trusted-public-keys = [
+        "cache.local:be5jFLkiwNyOep/McxSafB3jguBmztxx+oJ46ySyc/s="
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       ];
-      stalled-download-timeout = 4;
+      stalled-download-timeout = 8;
-      connect-timeout = 4;
+      connect-timeout = 8;
       auto-optimise-store = true;
       fallback = true;
       allow-import-from-derivation = true;

modules/server/default.nix

@@ -14,6 +14,7 @@
     ./netdata.nix
     ./nextcloud.nix
     ./nginx.nix
+    ./nix-serve.nix
     ./open-webui.nix
     ./postgresql.nix
     ./samba.nix

modules/server/nix-serve.nix

@@ -0,0 +1,24 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  services = {
+    nix-serve = {
+      enable = true;
+      openFirewall = true;
+      port = 5000;
+      bindAddress = "0.0.0.0";
+      secretKeyFile = config.sops.secrets.private-key.path;
+    };
+  };
+  sops.secrets = {
+    private-key = {
+      key = "private-key";
+      sopsFile = ./secrets/nix-serve.yaml;
+      mode = "0600";
+    };
+  };
+}

modules/server/secrets/nix-serve.yaml

@@ -0,0 +1,16 @@
+private-key: ENC[AES256_GCM,data:VTj1cmhYLbBuUnIgtXI3CZtULaNZ5XOpoheJB0gUwrWrH5B0rmxcvZLlJWX7xhGs4oqcC3Wwmo+TBPhcgGylLVdCuhJG5A94UwOa9ZIV4s3x3IJ4RU3UcHTsA0xdtw7XxBfryw==,iv:8oZCojIU0JXWJgE5t+fNNW9trC109yOJp1UGAV76FbU=,tag:S74cHFy9B8C29npdcoVBeg==,type:str]
+sops:
+    age:
+        - recipient: age13l2gtk0nzr484zprp7e0pkrt0ne0j4asyn2pjmlaw73nte7t7d8q4sqtxm
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6MHBkYzZneEdhUlN5MEpx
+            NGxud1BkVU1NUFdyVFE2VDJWb1M2cW9IcUVFCm9QZ3RvNHFaeWpFbnZ3Q1dKSDdn
+            RHQvUDgrZHRiUHpSR3FrWXRkQUxXWGMKLS0tIERsemNuL1BwR2xYYUpmbVFROWtN
+            RGI1WlRGMzlkS2tqQ0JPSFJHTUY1TUkKDeaivc+ST8MYtnJEDx07Y+IhtpvblR47
+            SLZf6WKQ8WNY4Bb5VeMWiCABPP/2L+VwoACqkOdZ01yGUVQSc9X6tw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-05-03T17:05:41Z"
+    mac: ENC[AES256_GCM,data:6jNp7N7lIvsLez3zQbDKTWPyvkL8u9g34I3q27GudgXzYw8B3Pb26jc9dCYCxCylCZxN5IeWWyHvUt4PadQABI4jrrIKnIfVV1A2c+A90chu+xSyE/B9OhkSC7yYVOnCURJPYku8799RIRkpHAWeKawkydbOiszCiC3qIKZDSTQ=,iv:xXivLDNnTABlNeWOOWsCESDUOnFv+9Lh0o029r7rk+A=,tag:vUoIZjcNtE3xJX/jNCao7Q==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.12.2