{ ... }: { services.nix-serve = { enable = true; # needed if i want to trust my own build packages and dirivations # nix-store --generate-binary-cache-key key-name secret-key-file public-key-file # secretKeyFile = sops.nixServeSecretKeyFile.path }; }