64 lines
1.5 KiB
Nix
64 lines
1.5 KiB
Nix
# Nix configuration
|
|
{
|
|
pkgs,
|
|
config,
|
|
lib,
|
|
inputs,
|
|
...
|
|
}:
|
|
{
|
|
nix = {
|
|
settings = {
|
|
# Enable Flakes
|
|
experimental-features = [
|
|
"nix-command"
|
|
"flakes"
|
|
];
|
|
|
|
# Use Lix instead of Nix
|
|
extra-substituters = [ "https://cache.lix.systems" ];
|
|
trusted-public-keys = [ "cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o=" ];
|
|
|
|
# Only allow these users to use Nix
|
|
allowed-users = [
|
|
"root"
|
|
config.users.users.aires.name
|
|
];
|
|
|
|
# Avoid signature verification messages when doing remote builds
|
|
trusted-users = [ config.users.users.aires.name ];
|
|
};
|
|
|
|
# Enable periodic nix store optimization
|
|
optimise.automatic = true;
|
|
|
|
# Configure NixOS to use the same software channel as Flakes
|
|
registry = lib.mapAttrs (_: value: { flake = value; }) inputs;
|
|
nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
|
|
|
|
# Configure remote build machines (mainly Haven)
|
|
# To enable remote builds for a specific host, add `nix.distributedBuilds = true;` to its config
|
|
buildMachines = [
|
|
{
|
|
hostName = "haven";
|
|
systems = [
|
|
"x86_64-linux"
|
|
"aarch64-linux"
|
|
];
|
|
protocol = "ssh-ng";
|
|
supportedFeatures = [
|
|
"nixos-test"
|
|
"kvm"
|
|
"benchmark"
|
|
"big-parallel"
|
|
];
|
|
}
|
|
];
|
|
|
|
# When using a builder, use its package store
|
|
extraOptions = ''
|
|
builders-use-substitutes = true
|
|
'';
|
|
};
|
|
}
|