+4

.vscode/settings.json

reviewed

··· 1 1 + { 2 2 + "git.alwaysSignOff": true, 3 3 + "scm.alwaysShowActions": true 4 4 + }

+8 -16

flake.nix

reviewed

··· 3 3 4 4 # try to be in-sync with the nix-channels 5 5 inputs = { 6 6 - nixpkgs = { 7 7 - url = "github:NixOS/nixpkgs/nixos-unstable"; 8 8 - }; 9 9 - home-manager = { 10 10 - url = "github:nix-community/home-manager/master"; 11 11 - }; 12 12 - nixos-hardware = { 13 13 - url = "github:NixOS/nixos-hardware/master"; 14 14 - }; 15 15 - determinate = { 16 16 - url = "https://flakehub.com/f/DeterminateSystems/determinate/0.1"; 17 17 - }; 18 18 - vscode-server = { 19 19 - url = "github:nix-community/nixos-vscode-server"; 20 20 - }; 6 6 + nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable"; 7 7 + home-manager.url = "github:nix-community/home-manager/master"; 8 8 + nixos-hardware.url = "github:NixOS/nixos-hardware/master"; 9 9 + determinate.url = "https://flakehub.com/f/DeterminateSystems/determinate/0.1"; 10 10 + vscode-server.url = "github:nix-community/nixos-vscode-server"; 21 11 }; 22 12 23 13 outputs = { ··· 32 22 stellapent-cier = nixpkgs.lib.nixosSystem { 33 23 system = "x86_64-linux"; 34 24 modules = [ 25 25 + ./hosts/stellapent-cier/configuration.nix 26 26 + 27 27 + # load Determinate Nix and the rest 35 28 determinate.nixosModules.default 36 29 vscode-server.nixosModules.default 37 30 home-manager.nixosModules.home-manager 38 38 - ./hosts/stellapent-cier/configuration.nix 39 31 ]; 40 32 }; 41 33 };

+1

hosts/stellapent-cier/configuration.nix

reviewed

··· 111 111 htop 112 112 google-chrome 113 113 direnv 114 114 + cachix 114 115 ]; 115 116 116 117 # Some programs need SUID wrappers, can be configured further or are

+49 -3

shared/meta-configs.nix

reviewed

··· 1 1 - # This is the meta config file for nixpkgs and nix cli 1 1 + # This is the meta config file for nixpkgs and nix cli itself, including 2 2 + # trusted keys for cachnix caches 2 3 3 4 { config, pkgs, lib, ... }: 4 5 ··· 13 14 }; 14 15 }; 15 16 16 16 - # Enable the Flakes feature and the accompanying new nix command-line tool 17 17 - nix.settings.experimental-features = [ "nix-command" "flakes" ]; 17 17 + nix = { 18 18 + settings = { 19 19 + experimental-features = [ 20 20 + "nix-command" 21 21 + "flakes" 22 22 + "ca-derivations" 23 23 + "nix-daemon" 24 24 + "cgroups" 25 25 + "impure-derivations" 26 26 + "nix-remote" 27 27 + ]; 28 28 + 29 29 + trusted-users = [ 30 30 + "root" 31 31 + "gildedguy" 32 32 + "ajhalili2006" 33 33 + ]; 34 34 + 35 35 + # just sync with trusted-users, but w/o root 36 36 + allowed-users = [ 37 37 + "gildedguy" 38 38 + "ajhalili2006" 39 39 + ]; 40 40 + 41 41 + trusted-public-keys = [ 42 42 + # devenv.sh 43 43 + "devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw=" 44 44 + 45 45 + # my caches for nixos and nixpkgs related builds (including devenvs) 46 46 + "ajhalili2006-nixos-builds.cachix.org-1:fA8HXvGR1i792D+CxL2iW/TQzUcyoW7zPUmC9Q4mQLg=" 47 47 + 48 48 + # the main cache itself 49 49 + "andreijiroh-dev.cachix.org-1:7Jd0STdBOLiNu5fiA+AKwcMqQD2PA1j9zLDGyDkuyBo=" 50 50 + 51 51 + # recaptime.dev cache 52 52 + "recaptime-dev.cachix.org-1:b0UBO1zONf6ceTIoR06AKhgid4ZOl5kxB/gOIdZ9J6g=" 53 53 + ]; 54 54 + 55 55 + # also list them all too 56 56 + trusted-substituters = [ 57 57 + "https://devenv.cachix.org" 58 58 + "https://andreijiroh-dev.cachix.org" 59 59 + "https://ajhalili2006-nixos-builds.cachix.org" 60 60 + "https://recaptime-dev.cachix.org" 61 61 + ]; 62 62 + }; 63 63 + }; 18 64 }