53a00386

By: Ammar Nanjiani <ammar.nanjiani@gmail.com>

feat(attic): take Attic off Cloudflare, give denethor NixCI

Anyone on the internet could read the middle-earth cache through the
Cloudflare tunnel, including whole host systems.

- Drop the attic tunnel ingress and public DNS record
- erebor pulls/pushes Attic over Tailscale (100.64.0.3:8080); Gatus too
- denethor substitutes from cache.nix-ci.com via hand-placed
  /etc/nix/nix-ci-netrc instead of public Attic
- Attic skips paths signed by nix-ci, so it stops duplicating NixCI
- Remove wsl-work dead public Attic substituter
Codeberg

Total

3m49s

Time to Start Worker time Duration Time to finish Idle
Config 17s 1s 1s 18s 17s
Eval 19s 3m47s 3m47s 4m07s 0s
Build - - - - -
Suite 17s 3m49s 3m49s 4m07s 17s