{ config, pkgs, ... }: { services.nix-serve = { enable = true; secretKeyFile = "/var/cache-priv-key.pem"; }; }