nixos-config/system/nix-serve.nix

{ config, pkgs, lib, ... }: {
  services.nix-serve = {
    enable = true;
    secretKeyFile = "/var/cache-priv-key.pem";
  };
}