nixos-blueprint/hosts/dunamis/builder.nix

{
  nix.settings = {
    secret-key-files = /var/nix/cache-priv-key.pem;
  };
}