kb01/aux-config
1
0
Fork 0
mirror of https://git.kb-one.de/kb01/aux-config.git synced 2025-12-05 10:28:53 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Nix-Config for LoyAdjo

Browse source
This commit is contained in:
kB01 2025-11-07 01:35:03 +01:00
parent d82856dfda
commit 07434754ba
No known key found for this signature in database
1 changed files with 43 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

47
systems/x86_64-linux/LoyAdjo/default.nix
View file

@ -8,11 +8,49 @@
# Configure Nix # Configure Nix
nix.package = pkgs.lixPackageSets.stable.lix; nix.package = pkgs.lixPackageSets.stable.lix;
nix.settings = {
experimental-features = [ "nix-command" "flakes" ];
trusted-users = [ "remotebuild" ];
};
nixpkgs.config.allowUnfree = false; nixpkgs.config.allowUnfree = false;
nix.settings.experimental-features = [ "nix-command" "flakes" ];
nix.settings.connect-timeout = 5;
nix.settings.fallback = true;
# Binary Cache and Substitutes
#nix.settings.substituters = [
# "ssh://ssh-nix@pkpnafs"
#];
#nix.settings.trusted-substituters = [
# "ssh://ssh-nix@pkpnafs"
#];
nix.settings.trusted-public-keys = [
"cache-pkpnafs:guOMrEa3XPWnRihJtf7KraRRFLHlKvd1bmWbk7BZEow="
"cache-senfnvp:8fiqd165A80WZD8gLgzMjiQk6/8AdaANZqERktzIXkU="
"cache-Ohybke:0D+ovjv+/WqRX7hQ2qJzBbpE8NEBGtzmWQDpmlszcHQ="
];
nix.extraOptions = ''
secret-key-files = /root/secrets/cache-LoyAdjo.sec
builders-use-substitutes = true
'';
#nix.sshServe.enable = true;
#nix.sshServe.keys = [
#];
# Nix Builders
nix.distributedBuilds = true;
nix.buildMachines = [
{
hostName = "pkpnafs";
sshUser = "nix-builder";
system = "x86_64-linux";
systems = [ "x86_64-linux" "i686-linux" ];
supportedFeatures = [
"kvm"
"big-parallel"
];
maxJobs = 1;
}
];
# Nix Security
nix.settings.trusted-users=[ "remotebuild" ];
nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
"ungoogled-chromium" "ungoogled-chromium"
"ungoogled-chromium-unwrapped" "ungoogled-chromium-unwrapped"
@ -118,6 +156,7 @@
programs.steam.remotePlay.openFirewall = true; programs.steam.remotePlay.openFirewall = true;
hardware.steam-hardware.enable = true; hardware.steam-hardware.enable = true;
# Languagetool Spellchecking Server # Languagetool Spellchecking Server
services.languagetool = { services.languagetool = {
enable = true; enable = true;