adjusted workvm configuration

This commit is contained in:
christoph.hollizeck 2024-03-26 22:05:03 +01:00 committed by Christoph Hollizeck
parent 08f6189869
commit 21774ac23a
Signed by: Daholli
GPG key ID: 249300664F2AF2C7
36 changed files with 466 additions and 326 deletions

View file

@ -1,21 +1,21 @@
{ options
, config
, pkgs
, lib
, inputs
, ...
{
options,
config,
pkgs,
lib,
inputs,
...
}:
with lib;
with lib.wyrdgard; let
cfg = config.wyrdgard.nix;
substituters-submodule = types.submodule ({ name, ... }: {
substituters-submodule = types.submodule ({name, ...}: {
options = with types; {
key = mkOpt (nullOr str) null "The trusted public key for this substituter.";
};
});
in
{
in {
options.wyrdgard.nix = with types; {
enable = mkBoolOpt true "Whether or not to manage nix configuration.";
package = mkOpt package pkgs.nixUnstable "Which nix package to use.";
@ -25,65 +25,63 @@ in
key = mkOpt str "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" "The trusted public key for the substituter.";
};
extra-substituters = mkOpt (attrsOf substituters-submodule) { } "Extra substituters to configure.";
extra-substituters = mkOpt (attrsOf substituters-submodule) {} "Extra substituters to configure.";
};
config = mkIf cfg.enable {
assertions =
mapAttrsToList
(name: value: {
assertion = value.key != null;
message = "wyrdgard.nix.extra-substituters.${name}.key must be set";
})
cfg.extra-substituters;
(name: value: {
assertion = value.key != null;
message = "wyrdgard.nix.extra-substituters.${name}.key must be set";
})
cfg.extra-substituters;
environment.systemPackages = with pkgs; [
nixfmt
nix-prefetch-git
];
nix =
let
users =
[ "root" config.wyrdgard.user.name ]
++ optional config.services.hydra.enable "hydra";
in
{
package = cfg.package;
nix = let
users =
["root" config.wyrdgard.user.name]
++ optional config.services.hydra.enable "hydra";
in {
package = cfg.package;
settings =
{
experimental-features = "nix-command flakes";
http-connections = 50;
warn-dirty = false;
log-lines = 50;
sandbox = "relaxed";
auto-optimise-store = true;
trusted-users = users;
allowed-users = users;
settings =
{
experimental-features = "nix-command flakes";
http-connections = 50;
warn-dirty = false;
log-lines = 50;
sandbox = "relaxed";
auto-optimise-store = true;
trusted-users = users;
allowed-users = users;
substituters =
[ cfg.default-substituter.url ]
++ (mapAttrsToList (name: value: name) cfg.extra-substituters);
trusted-public-keys =
[ cfg.default-substituter.key ]
++ (mapAttrsToList (name: value: value.key) cfg.extra-substituters);
}
// (lib.optionalAttrs config.wyrdgard.tools.direnv.enable {
keep-outputs = true;
keep-derivations = true;
});
substituters =
[cfg.default-substituter.url]
++ (mapAttrsToList (name: value: name) cfg.extra-substituters);
trusted-public-keys =
[cfg.default-substituter.key]
++ (mapAttrsToList (name: value: value.key) cfg.extra-substituters);
}
// (lib.optionalAttrs config.wyrdgard.tools.direnv.enable {
keep-outputs = true;
keep-derivations = true;
});
gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 30d";
};
# flake-utils-plus
generateRegistryFromInputs = true;
generateNixPathFromInputs = true;
linkInputs = true;
gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 30d";
};
# flake-utils-plus
generateRegistryFromInputs = true;
generateNixPathFromInputs = true;
linkInputs = true;
};
};
}