From 2631fac04b5f32d47aabceafb48753b4cf511c41 Mon Sep 17 00:00:00 2001
From: Soispha <soispha@vhack.eu>
Date: Sat, 13 Jan 2024 21:59:37 +0100
Subject: fix(sys/svcs/nix): Improve some default configuration

---
 sys/svcs/nix/default.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'sys/svcs/nix')

diff --git a/sys/svcs/nix/default.nix b/sys/svcs/nix/default.nix
index 11bae56f..7e5c8388 100644
--- a/sys/svcs/nix/default.nix
+++ b/sys/svcs/nix/default.nix
@@ -34,12 +34,18 @@ in {
         #"ca-derivations"
       ];
 
+      use-xdg-base-directories = true;
+
       #substituters = ["https://cache.ngi0.nixos.org/"];
       #trusted-public-keys = ["cache.ngi0.nixos.org-1:KqH5CBLNSyX184S9BKZJo1LxrxJ9ltnY2uAs5c/f1MA="];
-      fallback = true; # TODO: what does this do?
+
+      fallback = true; # Build from source, if binary can't be substituted
 
       keep-failed = true; # keep failed tmp build dirs
       pure-eval = true; # restrict file system and network access to hash
+
+      sandbox-fallback = false; # Don't disable the sandbox, if the kernel doesn't support
+                                # it
     };
   };
 }
-- 
cgit 1.4.1