From 31dd42d37d64ff40d91db9e564996e04990be243 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nikodem=20Rabuli=C5=84ski?= <nikodem@rabulinski.com>
Date: Sun, 17 Sep 2023 12:22:04 +0200
Subject: [PATCH] Try building wrappers in CI

---
 effects.nix               |   4 +++-
 hosts/kazuki/default.nix  |   5 +++++
 secrets/kazuki-cachix.age | Bin 0 -> 665 bytes
 secrets/secrets.nix       |   1 +
 4 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 secrets/kazuki-cachix.age

diff --git a/effects.nix b/effects.nix
index 9cc2079..832e826 100644
--- a/effects.nix
+++ b/effects.nix
@@ -1,4 +1,4 @@
-{
+{self, ...}: {
   defaultEffectSystem = "aarch64-linux";
 
   hercules-ci = {
@@ -11,6 +11,8 @@
   herculesCI = {
     onPush = {
       default.enable = true;
+
+      wrappers.outputs = self.packages.aarch64-linux;
     };
   };
 }
diff --git a/hosts/kazuki/default.nix b/hosts/kazuki/default.nix
index d7bc7a1..9c1d694 100644
--- a/hosts/kazuki/default.nix
+++ b/hosts/kazuki/default.nix
@@ -26,5 +26,10 @@
     };
 
     common.hercules.enable = true;
+    age.secrets.kazuki-cachix = {
+      file = ../../secrets/kazuki-cachix.age;
+      owner = config.systemd.services.hercules-ci-agent.serviceConfig.User;
+    };
+    services.hercules-ci-agent.settings.binaryCachesPath = config.age.secrets.kazuki-cachix.path;
   };
 }
diff --git a/secrets/kazuki-cachix.age b/secrets/kazuki-cachix.age
new file mode 100644
index 0000000000000000000000000000000000000000..c210043a77485e00dda87bddbb6fdbde422a5f2a
GIT binary patch
literal 665
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT)Fv+saEmtV0j7*NK
zOet`)F!U&OFER`)EJ!p-FZV4f&M?X|4v$PX^-fPWPER+@N#-&L&vGyE(KgR3b#!z0
z2@1;%DlKx>4>a>m4lNB%3&=O~D+}}q@J>!KFGsh{-8-YKJYAu<z~3o7*|93p$;3S{
zwZOnDGSA$yFe%tC$HU1l%`40@!q+rUJF}qJBcChVt;#pYIoZD|&$KAnD<!hfveMk!
zBh%3{$RJAFH^;Cbz|zOdw9v=2(iLP|aCJ?!ZhBE_VsR=Lm#(g^LZoM9h_6wmSz&~k
ztGSV}kxxa6hf}3VMtNm%W@xTUm2+lFglAw;dPboI*UAl#9xZ!v!uB^~onV(;f8426
zYd;*B%^=70Wd=j@jLvB8(B|}yf4R<!FHMc&S!TM#`>Tulj?y-z)`<4gnfVWt#2-r4
z74-&e*!S^iV8hv&fugntw3#KDTT-XL)H-qNfPL*buOimZEo+W;A6&E9>Fk%d^eqfG
z->8T)o4?v@bpGC)M%kI1>ut3bEWf|J(J@O@a_74B64FoqUA*D8=%&Bn51WaTE=<wz
zZfJB5HCnr>MU1Iv=V7PJJtis#cJQA&q;rDdQtaY$udLm!)jZ7JH*fi-s~rx8(VW)~
zp4?Qs#`5k)^=Zq_y{LVrD$fzN{mFEv7iSJH*&!owG$;4d*_J7JUe)HUT;>+OOVl5j
zi+{9waC(u#^`k1!{wQ-iO}MEnFM4*7-^Mo$TW5S;>gZjX;A*%irHZHLlGSY<6RR)V
zqkdTYeeCB`Qso`g6z}uwfZzht9gi1ZS96`Q?Q^_F`m$r6W*PX~n*J6SkUVfp7yuqr
B7X<(S

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 143e71a..68ddd3d 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -6,4 +6,5 @@ in {
   "vault-cert-env.age".publicKeys = [keys.system.kazuki keys.other.bootstrap];
   # "bitwarden-env-file.age".publicKeys = [keys.system.kazuki keys.other.bootstrap];
   "hercules-token.age".publicKeys = [keys.system.kazuki keys.other.bootstrap];
+  "kazuki-cachix.age".publicKeys = [keys.system.kazuki keys.other.bootstrap];
 }