Commit 60cd1a8e56f1

Vincent Demeester <vincent@sbr.pm>
2026-02-18 07:56:56
feat(harmonia): added okinawa signing key and public key
Added encrypted harmonia signing key for okinawa cache server and registered its public key in trusted substituters. This completes phase 1.2 of the aomi migration plan.
main
1 parent a3f8266
Changed files (2)
secrets
harmonia
okinawa-signing-key.age
systems
default.nix
secrets/harmonia/okinawa-signing-key.age
Binary file
systems/default.nix
@@ -95,6 +95,7 @@
         # Local Harmonia binary caches
         "http://aomi.sbr.pm:5000" # x86_64-linux
         "http://aion.sbr.pm:5000" # aarch64-linux
+        "http://okinawa.sbr.pm:5000" # x86_64-linux (migration target)
       ];
       trusted-public-keys = [
         "r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c="
@@ -105,6 +106,7 @@
         # Local Harmonia cache public keys
         "cache.aomi.home-1:QjLpxXo2XgJoZRGd/u6tSoJoKmrndesKcwd5gR6sBuY="
         "cache.aion.home-1:VIbchtAJWf8+T46viAsLaQYDhG9KUGVo+vWxH1Tlz94="
+        "cache.okinawa.home:gp+IG0OaO4L/J0drL8OwmDtMPmdUq4kfLwg3mR8BkCs="
       ];
     };