A binary cache for Nix backed by Cloudflare R2. Push once, pull from anywhere. Per-team cache groups with HMAC token auth.
NARs stored on Cloudflare R2. Global edge network, no egress fees, just fast reads everywhere.
Each team gets an isolated subdomain and keyspace. Scoped tokens with read, write, and admin levels.
Stateless token validation. No database lookups on read. Compatible with nix netrc for seamless integration.
Sign up and create a group. You'll get a subdomain like myteam.cerbernix.com.
Add your cache URL and token to nix.conf and netrc. Done.
Use cerbernix-push to upload store paths. Your team pulls them instantly.
extra-substituters = https://myteam.cerbernix.com
extra-trusted-public-keys = myteam.cerbernix.com:<public-key>