{ ... }: { # port 5000 already in use. services.nix-serve = { enable = false; # needed if i want to trust my own build packages and dirivations # nix-store --generate-binary-cache-key key-name secret-key-file public-key-file # secretKeyFile = sops.nixServeSecretKeyFile.path }; }