Your Nix builds,
served fast.

A binary cache for Nix backed by Cloudflare R2. Push once, pull from anywhere. Per-team cache groups with HMAC token auth.

R2-backed storage

NARs stored on Cloudflare R2. Global edge network, no egress fees, just fast reads everywhere.

Team cache groups

Each team gets an isolated subdomain and keyspace. Scoped tokens with read, write, and admin levels.

HMAC token auth

Stateless token validation. No database lookups on read. Compatible with nix netrc for seamless integration.

Get started in three steps

1

Create a cache group

Sign up and create a group. You'll get a subdomain like myteam.cerbernix.com.

2

Configure Nix

Add your cache URL and token to nix.conf and netrc. Done.

3

Push builds

Use cerbernix-push to upload store paths. Your team pulls them instantly.

Drop-in Nix config

nix.conf
extra-substituters = https://myteam.cerbernix.com
extra-trusted-public-keys = myteam.cerbernix.com:<public-key>