[host builder] fix trusted-public-keys

turns out, the name is linked to the key and also not relevant to the substituter
Merge branch 'add_blackbox_metrics'
2026-09-07 19:59:12 +02:00 · 2026-09-07 17:18:13 +02:00 · 2026-09-04 18:47:00 +02:00 · 2026-09-04 18:12:55 +02:00 · 2026-09-04 17:21:22 +02:00
5 changed files with 8 additions and 4 deletions
@@ -86,7 +86,7 @@ in
  };

  nixpkgs.config.allowUnfree = true; 
-
+  boot.binfmt.emulatedSystems = [ "aarch64-linux" "i686-linux" ];
  services.acpid.enable = true;
  time.timeZone = "Europe/Berlin";
  system.stateVersion = "26.05"; # Do.. Not.. Change..
@@ -24,7 +24,7 @@

  services.hydra = {
    enable = true;
-    hydraURL = "localhost:3000";
+    hydraURL = "https://hydra.malobeo.org";
    useSubstitutes = true;
    notificationSender = "hydra@localhost";

@@ -33,6 +33,8 @@
      binary_cache_secret_key_file = /etc/nix/albert/secret
      binary_cache_dir = /var/lib/hydra/cache
      Include ${config.sops.secrets.gitea_token.path}
+      using_frontend_proxy 1
+      base_uri hydra.malobeo.org
      <hydra_notify>
        <prometheus>
          listen_address = 0.0.0.0
@@ -304,8 +304,11 @@ in
      enableACME = true;
      locations."/" = {
        proxyPass = "http://${hosts.malobeo.hosts.albert.network.address}:3000";
+        recommendedProxySettings = true;
        extraConfig = ''
          proxy_set_header Host $host;
+          proxy_set_header X-Forwarded-Port 443;
+          proxy_set_header X-Forwarded-Proto https;
        '';
      };
    };
@@ -92,7 +92,6 @@ in
      '';
      # don't let the switch kill this service, aborting the switch
      restartIfChanged = false;
-      serviceConfig.RemainAfterExit = true;
      unitConfig.X-StopOnRemoval = false;
      # create timer
      startAt = "hourly";
@@ -32,7 +32,7 @@ rec {
              ];
              trusted-public-keys = [
                "cache.dynamicdiscord.de:DKueZicqi2NhJJXz9MYgUbiyobMs10fTyHCgAUibRP4="
-                "cache.malobeo.org:+eSv8F63uj94A0fvmdyPcDDH0qI3CYR91fsbA/eLFGw="
+                "albert:+eSv8F63uj94A0fvmdyPcDDH0qI3CYR91fsbA/eLFGw="
              ];
              trusted-users = [ "root" "@wheel" ];
            };
Author	SHA1	Message	Date
ahtlon	c5e1667b16	[host builder] fix trusted-public-keys Check flake syntax / flake-check (push) Successful in 23m23s Details Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details turns out, the name is linked to the key and also not relevant to the substituter	2026-09-07 19:59:12 +02:00
ahtlon	a6de2c394d	Merge branch 'add_blackbox_metrics' Check flake syntax / flake-check (push) Successful in 18m32s Details	2026-09-07 17:18:13 +02:00
ahtlon	74a8c7de2d	[autoupdate] fix autoupdate not running Check flake syntax / flake-check (push) Successful in 9m53s Details Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details my bad, i read that `RemainAfterExit` would allow a manual nixos switch to work but it prevents the timer from starting the service at all	2026-09-04 18:47:00 +02:00
ahtlon	426394ff22	[fanny] fix hydra proxy Check flake syntax / flake-check (push) Successful in 19m36s Details Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details	2026-09-04 18:12:55 +02:00
ahtlon	f2deba5153	[albert] change url, add binfmt Check flake syntax / flake-check (push) Successful in 21m8s Details Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details	2026-09-04 17:21:22 +02:00