diff --git a/systems/x86_64-linux/LoyAdjo/default.nix b/systems/x86_64-linux/LoyAdjo/default.nix index 7a47730..c75d438 100644 --- a/systems/x86_64-linux/LoyAdjo/default.nix +++ b/systems/x86_64-linux/LoyAdjo/default.nix @@ -8,11 +8,49 @@ # Configure Nix nix.package = pkgs.lixPackageSets.stable.lix; - nix.settings = { - experimental-features = [ "nix-command" "flakes" ]; - trusted-users = [ "remotebuild" ]; - }; nixpkgs.config.allowUnfree = false; + nix.settings.experimental-features = [ "nix-command" "flakes" ]; + nix.settings.connect-timeout = 5; + nix.settings.fallback = true; + + # Binary Cache and Substitutes + #nix.settings.substituters = [ + # "ssh://ssh-nix@pkpnafs" + #]; + #nix.settings.trusted-substituters = [ + # "ssh://ssh-nix@pkpnafs" + #]; + nix.settings.trusted-public-keys = [ + "cache-pkpnafs:guOMrEa3XPWnRihJtf7KraRRFLHlKvd1bmWbk7BZEow=" + "cache-senfnvp:8fiqd165A80WZD8gLgzMjiQk6/8AdaANZqERktzIXkU=" + "cache-Ohybke:0D+ovjv+/WqRX7hQ2qJzBbpE8NEBGtzmWQDpmlszcHQ=" + ]; + nix.extraOptions = '' + secret-key-files = /root/secrets/cache-LoyAdjo.sec + builders-use-substitutes = true + ''; + #nix.sshServe.enable = true; + #nix.sshServe.keys = [ + #]; + + # Nix Builders + nix.distributedBuilds = true; + nix.buildMachines = [ + { + hostName = "pkpnafs"; + sshUser = "nix-builder"; + system = "x86_64-linux"; + systems = [ "x86_64-linux" "i686-linux" ]; + supportedFeatures = [ + "kvm" + "big-parallel" + ]; + maxJobs = 1; + } + ]; + + # Nix Security + nix.settings.trusted-users=[ "remotebuild" ]; nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "ungoogled-chromium" "ungoogled-chromium-unwrapped" @@ -118,6 +156,7 @@ programs.steam.remotePlay.openFirewall = true; hardware.steam-hardware.enable = true; + # Languagetool Spellchecking Server services.languagetool = { enable = true;