add the post build hook to all systems

config/nix.nix

@@ -4,7 +4,18 @@
   config,
   system,
   ...
-}: {
+}: let
+  post-build-hook = pkgs.writeScript "post-build-hook" ''
+    #!/bin/sh
+    set -euf
+    export IFS=' '
+    ${pkgs.nix}/bin/nix-store -r $DRV_PATH
+    for f in $DRV_PATH $OUT_PATHS; do
+      ${pkgs.nix}/bin/nix store sign --key-file ${config.sops.secrets."services/nix/cache-key".path} $f
+      ${pkgs.nix}/bin/nix copy --to 's3://cache-chir-rs?scheme=https&endpoint=s3.us-west-000.backblazeb2.com&secret-key=${config.sops.secrets."services/hydra/cache-key".path}&multipart-upload=true&compression=zstd&compression-level=15' $f
+    done
+  '';
+in {
   imports = [
     ./workarounds
   ];
@@ -23,6 +34,7 @@
         "nixcache:8KKuGz95Pk4UJ5W/Ni+pN+v+LDTkMMFV4yrGmAYgkDg="
         "hydra.nixos.org-1:CNHJZBh9K4tP3EKF6FkkgeVYsS3ohTl+oS0Qa8bezVs="
       ];
+      post-build-hook = "${post-build-hook}";
     };
     package = pkgs.nix;
     extraOptions = ''
@@ -83,4 +95,5 @@
     dates = "hourly";
   };
   systemd.services.nix-daemon.environment.TMPDIR = "/build";
+  sops.secrets."services/nix/cache-key" = {};
 }

config/services/hydra.nix

@@ -16,16 +16,6 @@
   machines = pkgs.writeText "machines" ''
     localhost armv7l-linux,aarch64-linux,powerpc-linux,powerpc64-linux,powerpc64le-linux,riscv32-linux,riscv64-linux,wasm32-wasi,x86_64-linux,i686-linux - 12 1 kvm,nixos-test,big-parallel,benchmark,gccarch-znver1,gccarch-skylake,ca-derivations  -
   '';
-  post-build-hook = pkgs.writeScript "post-build-hook" ''
-    #!/bin/sh
-    set -euf
-    export IFS=' '
-    ${pkgs.nix}/bin/nix-store -r $DRV_PATH
-    for f in $DRV_PATH $OUT_PATHS; do
-      ${pkgs.nix}/bin/nix store sign --key-file ${config.sops.secrets."services/hydra/cache-key".path} $f
-      ${pkgs.nix}/bin/nix copy --to 's3://cache-chir-rs?scheme=https&endpoint=s3.us-west-000.backblazeb2.com&secret-key=${config.sops.secrets."services/hydra/cache-key".path}&multipart-upload=true&compression=zstd&compression-level=15' $f
-    done
-  '';
 in {
   imports = [
     ./postgres.nix
@@ -130,5 +120,4 @@ in {
     };
   };
   nix.settings.trusted-users = ["@hydra"];
-  nix.settings.post-build-hook = "${post-build-hook}";
 }

secrets/nas.yaml

@@ -2,6 +2,8 @@ network:
     wireguard:
         privkey: ENC[AES256_GCM,data:JDCu/XUbXJz13OqC35DQS+g0XDUGUXIBMDK2i0gCnnRqe7pTkIauTLHeh64=,iv:Ybex9u6i4QN6MXECTBJy8YBgK5Ge/LRxZLE5lXBhBPM=,tag:v+ESpwLqMcDxv9ThgqxXiw==,type:str]
 services:
+    nix:
+        cache-key: ENC[AES256_GCM,data:nPa2fxmXejfKX6otVNpK5Zwg3XW8zaPWA/TktczWcRKaOzrr7kdQhJsC1Pe6yfyZ7NKbbuKv7rId1lPRMT/ptjoKsUADqxVn2xXc5M9oyLlH3BZqOwBO2JOPHPw/nfberA==,iv:3ZyGhfMbiyiUqezUoaBMaQxpaYUHSOdYJrncyuRLW/4=,tag:fF5L1n7uND61B8IIKhb42w==,type:str]
     moa:
         secret: ENC[AES256_GCM,data:ySHuTf0By31PJN3GgV9sMxYqCllUaA==,iv:x6Esv1QRR5rQmi1C7SXVfRlrh5m0oRoufPMp5BElaVQ=,tag:6dieM2XhmycKlz9iDa+6Eg==,type:str]
         twitter_oauth_key: ENC[AES256_GCM,data:rIl6xauEQ002kFwZUMcbD5JlubikFcoESJ4ZNcfxF2rR+Q==,iv:IQAfmf9J9+naCaG0dtVXQ1y5XUryB/m25CNg955qQEw=,tag:KqP1YTAIZSz8AShYxd4EBw==,type:str]
@@ -70,8 +72,8 @@ sops:
             WnV3QWxtalIzWFdoQmpDTmJsNGdNOW8K++rFGXy0G6Gcu2gQwSP6xfXInQ/y5nh5
             2oGp8sfOLFWnNI4SWL0ChP47K3C/9ysUHwQnUYPbRafZ/4X6cN40ZQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-11-02T20:16:01Z"
-    mac: ENC[AES256_GCM,data:7+qzxrPJbIr794iq89k1y98jg17FAnDmIizZO1S2j0YaFbxKaRNy/tPSFr8s6FsLBf+JwQohzVodxKOS+tveVGQppnnyNMOKYelzevAq0mhlvFmZpV9i/cJzg7tJ57gCjrpRdeENYqobFRm6ETSC1cvbOTUtSNApD28c5rJxvRQ=,iv:pRrdNOehIRayNvecHT/a8c8YCeSbVGBijTU5MBdDDuA=,tag:Z32bZBNrLYKhqm/VkbH4pw==,type:str]
+    lastmodified: "2022-11-10T11:02:20Z"
+    mac: ENC[AES256_GCM,data:q/bCLcE+Yzjn95WLJstjroGSfrXQDnoX0tBKanOAQl1JerAp4QSQDB/OWmQcIdxWEhFjiLEbnoq7MUkftNpuHP/IoR8MaXR54+BCEIC8NUpvVnZjb5NERN/msGJ4JtU3eyAl6a9Efy6+D5/71GbBgjV3dQyFOa0SdGDZJSp7k7c=,iv:ruNWPX2PY2laOO1vaKh995HVXlFyu9D8dTzs1Yocwco=,tag:0qc0+/M8WpzXgJ6I4o0wLw==,type:str]
     pgp:
         - created_at: "2022-04-24T10:34:20Z"
           enc: |

secrets/nixos-8gb-fsn1-1.yaml

@@ -8,6 +8,8 @@ security:
     restic:
         password: ENC[AES256_GCM,data:8W1pEFt+1lW2/Y11OrJa+glMM1A=,iv:V0R7PlBMxl/oTJxE10MIDMtbqr98bE/po+/92MGMftY=,tag:juGYo8nQy7IJUX28f2ZznQ==,type:str]
 services:
+    nix:
+        cache-key: ENC[AES256_GCM,data:aLUW21G4ubmxS97LOwvUY+9ovrk02tZwq3D6tSO5tK9DwhySEuquQIHKsmuhsQtuCZRDLPgRh+T1XIKykWxv0S42NhdMGiE6GuRs8SbnEwcYMHwEPwHHMppG38G+EEKmTA==,iv:nm0yWYS8xk2C5mn3lpSEocqmCFOx2rL57euMfcXOXHA=,tag:WXEAMiMS9S/0hKrd63mBLQ==,type:str]
     akkoma.exs: ENC[AES256_GCM,data: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,iv:HRszf3GE1/4xFwdWpTF7sz9TIKXO/2Y8j5Qd+Dk3zj0=,tag:iLSSIiOG4m+YuEcfCXyf/g==,type:str]
     matrix-media-repo:
         access-key-id: ENC[AES256_GCM,data:2/H4GA5iHAkvl5XgLmxm9tnxIAps4YokpA==,iv:661Dt7ZYNsKYyp3yG1DW2n6eRezhN+vMjSQcg4V8qR0=,tag:jn/0Uj6//gAaAdXybUwLwA==,type:str]
@@ -72,8 +74,8 @@ sops:
             N1lNTTRhSDFsczd4VjNudUU2NEt4MUEKdVJIJmaoGcwUHa0BGB45jqYnm9aPVZxP
             dl1vkMx8EAiKhWKbBwQm5fFZcNh371rspGE7KOXmwNbNWef5bVfHpQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-11-04T18:01:16Z"
-    mac: ENC[AES256_GCM,data:8PSKtloJcyxRqRcgHtlhXlw+ufV84/mDEmkpp7e8o09f18ubUj9lsLm3QsenTw40Al+attn9X3Vk2ToBvo8kc+v3ZVqyOypyu1ATgMA+O39137VCOrlDDx9MjD+J2s1+T3booADXz5vpF03LIXHW18Mwg6tfSS6TSKO4kP5z8N8=,iv:l1mZfel+70ObfN36E2MLgGi4ihsBLOZ8WGa+EAFG8+c=,tag:sHXADpOPoz6YHYohe28o8g==,type:str]
+    lastmodified: "2022-11-10T11:03:02Z"
+    mac: ENC[AES256_GCM,data:Ewkt/gmaibTZKydIj0oNnx8C7SdU9hfHnPk5MrA82HMcoq1I9xoZmBaQl9+BNBNz+wQ2oFl0DwhmQZUfthffRv8ZsxtjZEa5aunBESByHlkXx4ZaaiQZmWCxaLkVJDCTGYLt8kTqY8NANs4g3Ab1i39/SpyAc/mdwJYKrxogu28=,iv:KlkaeELvLZnBiodO7jqwF3dkgClwxsjGp4/n9JslDSw=,tag:R5ZbLe/XfU+ySNf6jD1RAg==,type:str]
     pgp:
         - created_at: "2022-02-02T17:50:42Z"
           enc: |

secrets/nixos.yaml

@@ -4,6 +4,9 @@ network:
 security:
     restic:
         password: ENC[AES256_GCM,data:Ff4m8C2YizgEh3wNIfO/DgxG1jE=,iv:eDAUMKF974iq7bHnep97XGtj8wcJSa7HRXtUR2t8v8A=,tag:+OZQ8zUxzQHStGGajItDQg==,type:str]
+services:
+    nix:
+        cache-key: ENC[AES256_GCM,data:6tqhbeBTbc9PiiykSeM8X8merN93rLBSpaJ+qCIQAye01lpa6XFe8Ow+D7AKoXjcIMl/wZ3VOGCS73yOFgI5A/DLNV7p11GzedTf8f2LJlWC/AiCLU1VnQ2GRSRwtJjtvQ==,iv:w2IuGIFmA+cOmKh4iuE9AOsmpaPD90W+O6K2SwGf6b4=,tag:XaqYpOparH9GMFyg+757Ig==,type:str]
 email:
     lotte@chir.rs: ENC[AES256_GCM,data:7zI3LyB1z6algjFkafyXParw8g==,iv:19Cm4ZUGtf2p2MhHeA9pOJrPF/8pdTrAfM+TivD1Plw=,tag:+TapAwXxsgVHD68hSIXR0Q==,type:str]
     mdelenk@hs-mittweida.de: ENC[AES256_GCM,data:emTRqT64eQIGj4q8Jhep3I6yAm1k8smtRJm226WQM4GXfk1biWIhyi7u9/0KHErzf+sCIMohu/jFAx6gH5BF/w==,iv:e4gjNZGHWoCKEQZRkVwhaUfBKeDj4oCjDMS4yA3ONUQ=,tag:62Um+yjThSagoIHdUGVsbA==,type:str]
@@ -16,8 +19,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2022-04-16T13:40:11Z"
-    mac: ENC[AES256_GCM,data:x0tTj7O6rTpeerZtT5HhNJK/GWnDsE5URdmOWOaAlZ5vgZrEpmFebaO4UNmXQ4a/IPcdLJ5fUq1JiPApHV0MS1oZECXkf80rM2ySeiqLZJUIBgR8Z863AYvsnyhLVD7UeAOorYmzXR8sWBHO3WRdJ7tKsGmI3/NAuBRf0owKVJs=,iv:YD+wZm3xrt3EBF3cH7OBM7NRy5UGdz8/HgsXBaom6zM=,tag:sPYFhnnCphU/vZEQZS20LA==,type:str]
+    lastmodified: "2022-11-10T11:03:30Z"
+    mac: ENC[AES256_GCM,data:YIZZdtYd39jpH4z2wXyi1JrDinTvgXdPU+vHgPjuAZcJGS7n88Cjy+pvM69uGMk0AgBqTOi2Sy2dpzdnbdAPUKt5h89c6VvS9vaq/CMObT/Pr+RuyMrmociM8s3D4vVnHgEdEtIMyYM13qAzXKfUI+LQPY+/jkt1zn3A3jqPRdU=,iv:sYs35pRDqowDfZHFidSoNYwwSposNYlsoqQ38K0LTi8=,tag:Up62CeEOLfUui3G1G1un/g==,type:str]
     pgp:
         - created_at: "2022-03-22T08:12:00Z"
           enc: |
@@ -31,4 +34,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
     unencrypted_suffix: _unencrypted
-    version: 3.7.2
+    version: 3.7.3

secrets/nutty-noon.yaml

@@ -11,6 +11,8 @@ password:
     root: ENC[AES256_GCM,data:EqOfup6j6v1rhfjN5/zKTgN/QuUVytSeed3F0Tj+lWRtPUCmP1CdXTt7dzU98LA88S48M9C4c2sQ3SsJnfoApvZ2VGfMeoMo40mdEaSJR4FJo5KxR+OYjsc2BD0CGnAWBUXL8OnXB6HfYA==,iv:gXqTmyCX7OBUSBAsjDee0qG+wwkENCNtZ7VU89WQQFI=,tag:aNNJI93+L4NxV1kyW6lqUw==,type:str]
     darkkirb: ENC[AES256_GCM,data:iTWDpNIMlh6DMSBn981M5QTYk0uFutM1i7J2aiLWILIp8yqIJgufMTNndlNPeM0CMjxAaER392f9z9pyTpxQ27JdSBO79AOflqfk280NBICMkVSOUQSEdnGaA5JLfgS4TwNbO1cSCPNlxg==,iv:ItjvSYOm68ZjjkspgVF2s4J4saq7+TIBbEaIhlQpnaI=,tag:KBlXqLL2Fh6IrSQn4Fq0mQ==,type:str]
 services:
+    nix:
+        cache-key: ENC[AES256_GCM,data:Aj6CqSrej9gvnYEN7pCa0yR4gUmcJKXuLPCxf/+Isa/ySaXvNEEx3t1kysc9/yFCGWD1TjbqyBpCgMpd14b/kJtZ2iTW0gmdnnoDDqLFm6ywL6zRaRZqCUzkSiVmDL2Q2w==,iv:3GfLPixiMRTBMzxUNyGOSvhktIdu9MjTuuw7F9Ggkj0=,tag:xAYp2W47/7i7ruw9t4VDqA==,type:str]
     drone: ENC[AES256_GCM,data:KMg8/e3iqCRAjem/hSGqi/kA64zBWwkPsO67B0d8GI8JmQvK/xWrhwxSONLeYuppqfE=,iv:30GGgxmHzxfdwVyDwxmOaE1bU9FSj5p0a4FyOrr61Mg=,tag:rOstwAqa0ZHE+xPYp1W4HQ==,type:str]
 secureboot:
     DB.key: ENC[AES256_GCM,data:rrZQzfgknNqcQG/MHT86LUU2KVlu6XPhgbKWZkDEdExWkPCeNjST2DZTTL1mixDjZMhrT5SqGf0Cth6P4yT/8BXolTGwYpEnxYDbx87f8NL495NvDHtLWD5koxi3d9sa0Gs4qBPcAiThJKdQ0DQsgK2CXVzN/TjHP17eixoUBEIX79hlr9RTKLXX2xqDno05/kpYL4pIp9dHeJPEwhbpjv+KzF/5+oi9bh12uTtFECOJNm/aZvsXTSDNXzpbFKbqXBg6sJZ8I5LVMjbmJYDlY5fq3K1XUmCDU67vvv9M2uEYFgy6CW0r/YjVT1NlccmlNGvwbidDAGytdwE2XXLSG+PO6KHP9XWJZfluCHAm1tz+/cSJk+Nf1URQD+yO5HI5gHiBHIslaybWfb3fZmNYpMsnY+3f2p6Pjaq6cDRu0Ga1IVvDToxxn5QG06PiCV6sIrtvoCDz43GxlQxPUCICEg8WX5zfFIEoULVtUt07/5a4tXKXz9MeogGREHaqqwizTZGdGZsDh7ioFeAJDyOUVc3+sArWsO/zWnejDLX69LyB1kmN9ygnjAPQF1+zoRjtVvHBIPiQZAPDfEgfPhNVjFLafS8D2X3rv+5SAvLoPzVx1ydUDr97BK9W5TVt78+iv/lrPdjRGQw53wtFaDHiDn8B9WwZeysY5UlViz7slkt+DoWYm4TkHVG7QQSLenNuMjPH5T8eqcVGzi1B8S6F1bA+kM8D6DwhqHLUE7EnXkyAmDpSH/7AY1YFpTpyMprJs2ebdt9jymHQbD6ZmcfzygTXjkwlt9S5uNdNisvKCLmvlGL6+Yr3zBWGyb1tgxY1MqnS2/LYjp4vucySGRr5/ttAxa/YhUN1bHlmoBVP0RJ+D2d0d1x1O/KbpAnNlz9rIp87ZnARcjkxiFIaJBB3IT09UVj1Q+gTcPRrbfMm5jnSelTsifoOWRP+9g99ESt2m+QZNeAH92qZwsYxyxXGljJyp3pLmOTJD7IWXlS0270VYi+I7XnyOdoFk6UFoMOnKgjJpzr2es207T6OIdNbrHBDB8Q7TNLOYyWv5epbqY6SFMFJRq5F36qpDD6HcHYp+iNWEJNmgsagbHNNQ+rDtooetBTmgc0R1JfOeBAaJEwl6+KhHJXiHC32YZ7VO21sRDXcXpmRT8bqNz/TnTA7wVnbCAmiLF1RFf2k3VkUvbrIpHVkgJBJhizYzRnKDQjqbmAITRGgZywSKukWA8tAGroak7ZqD7/Ym8GXY7b4x1lWorIYEHogZxe43Sbj1GlxuW7srwVQhQb3xkfLnklONtYz5h6QnjGKb374Lzn2wbZ1iFV8T6opc/+p9IOIlMsP0lLG+r821emotH+hp1ue2uTGTaTMK3v2iG2OwFKACiDfSiEpG/9KEhLN5v94Kx1BZRJoN60g26D1j5Ev8iQEMF/WN0M6uDSVYMzwqWUFzy7BlJgmwEAG2H9SThS4HAmHHsSyQL1yj124/nibohRn3jEC72mj2fphWgQ2uJP/80bZ897RDjqvMWQFFdCnjI6mV119BbNR+AFSdADby9EkU8iEW/Q/oLGR9UeWCL07gsnU+BmqWDgBBXC7RQZyMzVnwO7iPBWOY1a4iKnzEwgGbxLbLY7760X/qIX8lY07Tpc7K3U9hkQhFKAWDHtoc4G06bCMs5toVbHGWQ3QgY7LgA7izcRq2npPhDRPGvF7jnA0MBhhSaBex+u89MdhTY69+bCnbhzdz/EM1j3xAdFd3FzQaXNBKnPzzXm8wKy1KdqR79AGK/Rc1q3Z5dSHE4bvq59IwTBIOPeEueOx9Xfgr8kXw/QAabChJ0z9nmbL8t2xC9y257AIp8yzwrOmyEjUGKht9fD3dse7XU8i7PoAzE2xPJofeEXqDofloOs5kh51cr9OxIpdnsqRLC1kHrxp1kPOd74wwa3zam69NWiJkdj4NnJnVROV028R1PmhPKMpo3bRaaSs3GiKB0WoVJNkUQwkqB6zZj2AdRSHRPSo4byz6iApjENJGVOJ+DLM7ReUKL3NzmgLHP67JxKUcxq+ItQmu5O54b/A5VFosoxDnJ/Yzem9UG9YyxWOj4IEuqdSkWM/X8ceMujrF7w/ygan16kPzL0ZrACZ78X+2vKeHsYF2HoAJlLUnpMXO/lBBJTwpKD/1JEf1rcuYY6DkVNUgQAJGTq9eCyH/6cgPojAfWnCJRefVXIO+vnqNMVaT534ZpBsl9f5Mbnb2+ha2uHTKskEH3h0DsHOkWr5DduwLH8fn8d/SsoAA7eM2/GjGwUyXxfQRbDmCTmCk9nm4Iw79a2J31G7eHyP8Q5E+nlcPrICPzZdpArBuRK7gonQLjO37IXKROAl5PI/TymZnYf/dV9wEUoaXqxiKQq7u9sS6+Rbqg0TQnAZAvL0YsdEETAg1WOYcF+4Xyku255/KCMA35/yWNK2HhSUUTUFihWImN+A/8T2IgP8lvITM+sZWoz4P33DTBNHCfGlJqLynyxmZG2D43omG6mMD3RA0lpASMyb8xjw7lWlbJCtpsyFI0ERUmWQuPPp6B29/NhTWTrJXbqe6gBI1YAXlm1sDU0JpI17ojpYuMfbpRaoyIrCD3UugRlNYWIbD+nHdu444E2iyRA5YGrdxB2ssgYvwVLall5zcYeEG1mNQOzYZCbFONEWaSy/Jc0U1CTk4qDWXQ5Fpx9O5bX/+TdB50BxmT7nio9R/ElrpVgxq5czk/1psw4ze3vpf+15PyvHrY6YnTKxiNjdXADBy8Pa1RDmobh7WnDMrWia9Caek0NQPRcTyGP/Zt2ousJBwHJu7UF6bxUmXWIUiF8vrF/STqT/Jc3rXxFpTFng+ZubkwxfgG2PuykQC1jqQqezc8M61nZmd53GZ2FBi9WtMgMPsG146mwbCpGUaIYSxq4ufVdZ/QvMNEx2iQrrXgAapJjXd3UBFSR+9KKd77hdm4HEm0FMjfD/u/2X1WRTURLQbQ/YDOd+1sUajj9B7ZEFcBnLWTtxc/N4qP/LQKfsAgpYahMN+yJwTkGy+1wdPPgEohm3/sYDruin9XBxztSt9wF/PwbtRZ+cZduYBXfcfeoyWjT4xOsDCE17ohG1tnCAC7knUoVC4a3PqZJNoSDAyiGzMKLDdPerOBzcWDVX4KYQgdRvqY+cE+b9p7U8a+o3AQxi9IWUl9NpBT3UxGFSiBSVpA+dtOZ1lAv5+nDZNTeGdYhgtHe5DdsiHVtHRenhOUye8lYQyvGwz5UB/ITtYjJUaenkkhbYhUz7qFJR5hhqnQeS505+oah4ntLPzRLUIvUDdUJPjT5Zj0oA98RqrIuyCvC1A9zb6PknfVUEPxIM3+WIw0mxz0/lEZpH+1syAy3OnT/JHB5gwQtM7NHqqO8zGFOAPVwZyVOV7JFKmAU6ev++22HWIRGnlwtr4S1Te7V91+On/vlc9Z8Gt6zDVgzTCL6sWaL3JpygLagVL/MUfAvRsmmrnWQIjzfr/jDfKIVHWK+parqWI6yQdi3HYT/Jboekj3R0ADh6Zh9mbFJArIlgswlzgqIpEWDCcxBOaGUKI1VVeX1zYXdi83wNQEOy+7jGo+E9whWTskmNUY5AGpK8u5933Ycp768vNMcD0qf4JDBdyWh+y0z0AS0649f3mnc9YewUa3HLH3qfSNnLhLwNvE66K1fxKVcvS50pUXaDKDAsGFFDAt2QhlNBU5FdFP20hAQjXHRfXtOS0ZKvHoyHFF6k33ObhCr6h7rQ5+KNBU2X0Vd9s4eyH+18EdwTaHhE7v5ixRFIOyxBysKuiEGaGV8A4jqEiOgbzaHuUb4XSfJENPpl17fHSY8tcJwBHXImUHtAv0rE3zgqKX98Jn0044C9/rfRF/llKTNKSZ8rjNu/sH+GQSvUry0FjMfmd2CnkXWZD9gjoKHEnd3xZO11IewdLIfZLBIj0B1O55VCU6/QS+js8YOAQzfqNrQxB5Q0PQz1OG58Wo1y2XnOGcTTiTRYWWtOTdKE2U2J0RT45Bb44iT0YWaWM52aQIPY7Ac007kmHAIskw83orUO/ELQdRvv+eQ4tV+ylSR3uZyplVQR7jPqb/2N3hdcfKdXNpUMr7lgNn1dKH4MtPsjWhmpmhPGVqut78Eby1Lr+uTDC4SzbwVVpYmXP3PPH8r/9boMDPjgVjRDiyny9NTIlQx39jHedX46vFruS1tr1TWWNT+CpUuNNLWGCnK8yx1HuiXCkwwv0e90PsBQZCsVrGqtd7NaiStZO2DXMFBwgz41vgjn/4IC3n+MVg5BGfmRMicIlYN0SWuH/oMUJNnSsNhuD0/j0Y+VmcLwsc3plgi4qo24IFiXZB1c5RfF9l2BPN3jrGUjETyD0O5LI0E=,iv:OFiuSu/Kh8mf4BxwtbpT4TH4oDS+YXu0GFK5/Zy+C/w=,tag:Fu4WeWJhWwQGFLB1c3qyXg==,type:str]
@@ -29,8 +31,8 @@ sops:
             eEtjUkdQek1peEdhbXpnSDJ6ZWlQQ00K+wUZi9x5ja1832ov4DYxCH5fbfZFkXv1
             8U5idFtpxkQQH1mYKfBASC/3WbpH/xv3SCpIpqisqEVc7lL/2xD9cQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-06-23T10:40:52Z"
-    mac: ENC[AES256_GCM,data:z8DX77YwOgS9RZQicrV3nm/hmYTbVVz4QNZV6+Nr0Wh/c/sMb/b8cSEHBWiD+i6A4yP96ai9H18z0io9Dc35MAWWqYbtwpKYQ7shXqcvQwaUJ1WH0aplu0+D30yHPdbaLlM/KcoHRWAsCiHIm4MyHfzNZtgfzcfpQaII5vNMX4w=,iv:eZKJLN/1+IjfJRBUpzfz6lm/fwoukrZvU8oNW/D4MO4=,tag:qOL2kSt0UzM5Dz4QIEQwFg==,type:str]
+    lastmodified: "2022-11-10T11:03:42Z"
+    mac: ENC[AES256_GCM,data:LW8xWF1RklXEqAzzynrqROzr/lEseR+vf3/eSYlMhqedVpZqduvQDcdHWV4OD2r7O1/H0860NDTdARAUsjWAe0CH6BG0XgsM6bux2eX8fWMZ3CT9wDQF/rla0oQgtSIxlaFJAQsUWUf01BupPzngsTDR87vllAEvCzgBz+vaS6I=,iv:oI2Yc3Ss1zJcYwzl9Bz8Tmtuq/icvXHHHWSaz0fCzZg=,tag:SheWln3NW8KxO1hxze24hw==,type:str]
     pgp:
         - created_at: "2022-04-20T07:17:37Z"
           enc: |

secrets/thinkrac.yaml

@@ -4,6 +4,9 @@ network:
 security:
     restic:
         password: ENC[AES256_GCM,data:ojN22sxRaaSjBJaLOf6S0frOrRY=,iv:ZIssZTxvyBU3WZmuhJ/kb5M72BNFDpOV5Hdxc2D5BCM=,tag:B1u1NJQr6gLCRjvfqGDjsw==,type:str]
+services:
+    nix:
+        cache-key: ENC[AES256_GCM,data:WNbVy/IQGEX5vS7/EiHpiedh+P2Fyxf1cFr9N+DwKyHv/F1EcLLbewBOIG9suD41onDHoNQ+jklxK5Zr5cQP7qdO167l6Y7YUnAdG6laoOOVOgVMBuLquHAUMqlVqelX0g==,iv:o1eA9VwKWB23Q0UfLsUuqhcYv8b8YbvhYYXop9JQo74=,tag:kY6w3tYWGYviov47rjZLFw==,type:str]
 email:
     lotte@chir.rs: ENC[AES256_GCM,data:MywN+Etfri4TQQ8M01+RS4sLCA==,iv:s4hW8oGPs7PwdtiBlkuRmAJPjHjBonHWdNTrtA+aJLQ=,tag:3Xp2kHMgtRDmItpa+fJ0Fw==,type:str]
     mdelenk@hs-mittweida.de: ENC[AES256_GCM,data:iLQwJoW4sRF35M3dEIxKrqsAsJND0wVlfue9uGfZgr+filTkmfNsnzamg7eBfacURuJrHmGDXCMcjuH15GwONA==,iv:5zAeYL2YS4J38TXl0t1mLDxjAPdf4IpGogEuzYd+xJM=,tag:FMKvuq69uZrv1nUI/2erYg==,type:str]
@@ -25,8 +28,8 @@ sops:
             aHAxNitXREU0ZkZNUmorSFY2c3JPU0UK2rnyV/tDnn8nWYodDe7sgVdjfg14slBO
             DV5oMPB91c5IZ0S1/Sv1oAUcri/dKHKDljxP7HU5yG5kxVeEzqx4Jw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-04-13T14:29:52Z"
-    mac: ENC[AES256_GCM,data:2ZltbY3HMpRjePPVfYWIxDjPFpIBGh4+iBq02iMz+/os9nh0Ac3R4A0qxPZ858JNyQ/Skc//Qb17RPx+NdETxer5tLFBoPYOeJgQZe1Qjps9qiZzuZbpmCMVdLITR/emoQtKnP8dDUNO7LNuRYqCmvtXJnKe3gIzjBJ4QOsa93M=,iv:8w413CnKkqvUlRg8qgGurpNEZZdxN2K8RN1C6eGc60w=,tag:XVw1/eSpdoQL0sksTaO0aw==,type:str]
+    lastmodified: "2022-11-10T11:03:52Z"
+    mac: ENC[AES256_GCM,data:AF/TnCWt3uEwC5nkERoCHQrBhrb9Hz1HubSuJcetMkhqaGck/rEHYg9tGFK8SFKZU3nBmUc4miS7hRW8zLwCAdbhHfCLGKwKoOHlZzNlfNThEfr9Dj7mFrULPPnE8rHoTvVEPxCPQSNlq/Ext0C/PgO8sw0G/yKQSTBD7Sp/XOk=,iv:hQ8mW5OCv+DtvQP8Gf9SVCWT4oySSxO7G8yTr9i7Xy8=,tag:42T3r2qpcs3J1pxrcZqTEA==,type:str]
     pgp:
         - created_at: "2022-04-13T06:20:10Z"
           enc: |
@@ -40,4 +43,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
     unencrypted_suffix: _unencrypted
-    version: 3.7.2
+    version: 3.7.3