"hosts/plum/matrix-signing-key.age".publicKeys    = [ plum ] ++ admins;

	"hosts/plum/matrix-signing-key.age".publicKeys         = [ plum ] ++ admins;

  "hosts/plum/cache/key.age".publicKeys = [ plum ] ++ admins;

		./cache/default.nix

      allowedTCPPorts = [ 22 ];

      allowedTCPPorts = [ 22 80 443 ];

{ self, config, lib, pkgs, ... }: let
  inherit (config.networking) domain;
  inherit (lib) enabled merge;
  fqdn = "cache.${domain}";
  portNixServe = 8006;
in {
  imports = [(self + /modules/nginx.nix)];
  age.secrets.nixServeKey = {
    file = ./key.age;
    owner = "root";
  };
  services.nix-serve = enabled {
    package = pkgs.nix-serve-ng;
    secretKeyFile = config.age.secrets.nixServeKey.path;
    bindAddress = "127.0.0.1";
    port = portNixServe;
  };
  services.nginx.virtualHosts.${fqdn} = merge config.services.nginx.sslTemplate {
    locations."= /".return = "301 https://${domain}/404";
    locations."/".proxyPass = "http://127.0.0.1:${toString portNixServe}";
  };
}

      "https://cache.plumj.am/"

      "cache.plumj.am:NnfLDMdPEH3LE5WqFAilb4/UoIUfb0lZoFv2MoeMBbA="