See machines/fuuko/services/binary-cache.nix for limitations.
This requires not using the NixOS module, since it does not support loading it from a file.
Since I currently do not have access to sayuri, sayuri’s migration is not done yet. The host keys and wg-home-private-key secret still have to be added.