From 0c70c2b2b4222c3b224b2b0742946f565350b3a2 Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Tue, 14 Apr 2026 20:55:39 -0400
Subject: [PATCH] add infra for providing updates to yarn

---
 services/harmonia.nix | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/services/harmonia.nix b/services/harmonia.nix
index 002735e..f4b6b73 100644
--- a/services/harmonia.nix
+++ b/services/harmonia.nix
@@ -17,8 +17,22 @@
     settings.bind = "127.0.0.1:${toString service_configs.ports.private.harmonia.port}";
   };
 
+  # serve latest deploy store paths (unauthenticated — just a path string)
+  # CI writes to /var/lib/dotfiles-deploy/<hostname> after building
   services.caddy.virtualHosts."nix-cache.${service_configs.https.domain}".extraConfig = ''
-    import ${config.age.secrets.nix-cache-auth.path}
-    reverse_proxy :${toString service_configs.ports.private.harmonia.port}
+    handle_path /deploy/* {
+        root * /var/lib/dotfiles-deploy
+        file_server
+    }
+
+    handle {
+        import ${config.age.secrets.nix-cache-auth.path}
+        reverse_proxy :${toString service_configs.ports.private.harmonia.port}
+    }
   '';
+
+  # directory for CI to record latest deploy store paths
+  systemd.tmpfiles.rules = [
+    "d /var/lib/dotfiles-deploy 0755 gitea-runner gitea-runner"
+  ];
 }