Configuration

Point Nix at Vega in one place.

Add the substituter and public key to /etc/nix/nix.conf (or the equivalent NixOS nix.settings):

extra-substituters = https://vega-cache.dev
extra-trusted-public-keys = vega-cache-1:cPagS1g69NQGwlBCyTTeKav/NhlN8a7ixuj2uLOkHrQ=

Mirrored Nixpkgs paths keep their cache.nixos.org-1 signature, which Nix already trusts, so the key above is only needed for Vega-built outputs.

This URL serves the shared tier only. Your own CI-pushed builds live in your repository's tenant namespace and are NOT served here: a host that should substitute them needs the tenant URL https://vega-cache.dev/tenant/<owner>/<repo> and your tenant key, both printed by the agent after every push. Configuring only the URL above looks healthy to Nix and then misses every tenant path. See Caching your builds.