For owl1 and owl2 directly connect to hut via LAN with HTTP, but for raccoon pass via the proxy using jungle.bsc.es with HTTPS. There is no risk of tampering as packages are signed.
		
			
				
	
	
		
			11 lines
		
	
	
		
			279 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			11 lines
		
	
	
		
			279 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
| { config, ... }:
 | |
| {
 | |
|   nix.settings =
 | |
|     # Don't add hut as a cache to itself
 | |
|     assert config.networking.hostName != "hut";
 | |
|     {
 | |
|       substituters = [ "http://hut/cache" ];
 | |
|       trusted-public-keys = [ "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" ];
 | |
|     };
 | |
| }
 |