From bb3cdd804626b8b8a2e3d5734cbe11cfa8f32efb Mon Sep 17 00:00:00 2001
From: shiny <john@ogle.fyi>
Date: Sun, 8 Feb 2026 16:07:13 -0800
Subject: [PATCH] feat(nix): add harmonia cache to nix.settings

Configure all NixOS machines to use the internal harmonia binary cache:
- Add nix-cache.johnogle.info as substituter
- Add harmonia signing public key to trusted-public-keys
- Enable fallback for local builds when cache unreachable
- Set 5s connect-timeout for faster fallback

Refs: x-qdkuu

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 roles/common.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/common.nix b/roles/common.nix
index 73970f9..a58b492 100644
--- a/roles/common.nix
+++ b/roles/common.nix
@@ -23,7 +23,13 @@
         max-jobs = "auto";
         trusted-users = [ "johno" ];
         substituters = [
+          "https://nix-cache.johnogle.info"
         ];
+        trusted-public-keys = [
+          "nix-cache.johnogle.info-1:IC5x8BxnrqkU9XqhMdDnZLtSg9Y3rBJVXhve5DJ92J0="
+        ];
+        fallback = true;
+        connect-timeout = 5;
       };
 
       gc = {