sys/nix/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

{
  self,
  config,
  nixpkgs,
  ...
}: {
  nix = {
    registry = {
      nixpkgs.flake = nixpkgs;
      n.flake = nixpkgs;
      self.flake = self;
      s.flake = self;
    };
    channel.enable = false;
    distributedBuilds = true;
    buildMachines = [
      {
        hostName = "server1.vhack.eu";
        protocol = "ssh-ng";
        system = "x86_64-linux";
        supportedFeatures = ["big-parallel"];
      }
    ];
    gc = {
      automatic = true;
      dates = "daily";
      options = "--delete-older-than 3";
    };
    settings = {
      auto-optimise-store = true;
      experimental-features = ["nix-command" "flakes"];
      trusted-substituters = [
        "https://cache.garnix.io"
      ];
      trusted-public-keys = [
        "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
      ];
    };
  };
  home-manager.users.root.home = {
    username = "root";
    homeDirectory = "/root";
    stateVersion = "23.05";
    file.".ssh/config" = {
      text = ''
        Host server1.vhack.eu
               IdentitiesOnly yes
               IdentityFIle ${config.age.secrets.nixremote.path}
               User nixremote
      '';
    };
  };
}