Configured binary cache for Hercules CI

hosts/default.nix

@@ -187,6 +187,7 @@
         secrets = {
           "rock5b-wireguard-private-key" = {};
           "hercules-ci-join-token".owner = "hercules-ci-agent";
+          "hercules-ci-binary-caches".owner = "hercules-ci-agent";
         };
         colmena.deployment.buildOnTarget = true;
       };
@@ -232,6 +233,7 @@
           # "hydra-github-token".group = "hydra";
           "cache-private-key".owner = "nix-serve";
           "hercules-ci-join-token".owner = "hercules-ci-agent";
+          "hercules-ci-binary-caches".owner = "hercules-ci-agent";
         };
       };
     };

modules/hercules-ci/default.nix

@@ -8,9 +8,8 @@
     settings = {
       concurrentTasks = 8;
       clusterJoinTokenPath = config.age.secrets.hercules-ci-join-token.path;
-      # Don't need using private caches, if I would ever need remember to use agenix!
-      binaryCachesPath = pkgs.writeText "binary-caches-path" (builtins.toJSON {});
-      # secretsJsonPath = config.hci-secrets.hci-mlabs-haskell.target;
+      binaryCachesPath = config.age.secrets.hercules-ci-binary-caches.path;
+      # secretsJsonPath = config.hercules-ci-secrets.path;
     };
   };
 }

secrets/default.nix

@@ -11,6 +11,7 @@ in
     "cache-private-key.age".publicKeys = [ccr-ssh ccr-gpg mothership];
     "autistici-password.age".publicKeys = [ccr-ssh ccr-gpg thinkpad];
     "hercules-ci-join-token.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b];
+    "hercules-ci-binary-caches.age".publicKeys = [ccr-ssh ccr-gpg mothership rock5b];
 
     # WireGuard
     "thinkpad-wireguard-private-key.age".publicKeys = [ccr-ssh ccr-gpg thinkpad];