77 lines
2.0 KiB
Nix
77 lines
2.0 KiB
Nix
{ config, lib, pkgs, namespace, host, ... }:
|
|
let
|
|
inherit (lib.${namespace}) mkBoolOpt mkOpt;
|
|
|
|
cfg = config.${namespace}.nix;
|
|
in
|
|
{
|
|
options.${namespace}.nix = {
|
|
enable = mkBoolOpt true "Whether or not to manage nix configuration.";
|
|
package = mkOpt lib.types.package pkgs.nixVersions.latest "Which nix package to use.";
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
nix =
|
|
let
|
|
users = [
|
|
"root"
|
|
"@wheel"
|
|
"nix-builder"
|
|
"evanreichard"
|
|
];
|
|
in
|
|
{
|
|
inherit (cfg) package;
|
|
|
|
buildMachines = lib.optional (host != "nixos-builder") {
|
|
hostName = "10.0.50.130";
|
|
systems = [ "x86_64-linux" ];
|
|
sshUser = "evanreichard";
|
|
speedFactor = 1;
|
|
protocol = "ssh";
|
|
sshKey = config.sops.secrets.builder_ssh_key.path;
|
|
supportedFeatures = [
|
|
"benchmark"
|
|
"big-parallel"
|
|
"nixos-test"
|
|
"kvm"
|
|
];
|
|
};
|
|
|
|
checkConfig = true;
|
|
distributedBuilds = true;
|
|
|
|
gc = {
|
|
automatic = true;
|
|
options = "--delete-older-than 7d";
|
|
};
|
|
|
|
# This will additionally add your inputs to the system's legacy channels
|
|
# # Making legacy nix commands consistent as well
|
|
nixPath = lib.mapAttrsToList (key: _: "${key}=flake:${key}") config.nix.registry;
|
|
|
|
optimise.automatic = true;
|
|
|
|
settings = {
|
|
allowed-users = users;
|
|
auto-optimise-store = pkgs.stdenv.hostPlatform.isLinux;
|
|
builders-use-substitutes = true;
|
|
experimental-features = [
|
|
"nix-command"
|
|
"flakes "
|
|
];
|
|
flake-registry = "/etc/nix/registry.json";
|
|
http-connections = 50;
|
|
keep-derivations = true;
|
|
keep-going = true;
|
|
keep-outputs = true;
|
|
log-lines = 50;
|
|
sandbox = true;
|
|
trusted-users = users;
|
|
warn-dirty = false;
|
|
use-xdg-base-directories = true;
|
|
};
|
|
};
|
|
};
|
|
}
|