universe/modules/devos/nix.nix

94 lines
2.1 KiB
Nix

{ config, channel, inputs, pkgs, lib, self, ... }:
with lib;
{
nix = {
package = pkgs.nixUnstable;
settings = {
allowed-users = [ "@wheel" ];
trusted-users = [ "root" "@wheel" ];
system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ];
auto-optimise-store = true;
sandbox = true;
};
gc = {
automatic = true;
options = "--delete-older-than 3d";
dates = "weekly";
};
optimise.automatic = true;
extraOptions = ''
min-free = 536870912
keep-outputs = true
keep-derivations = true
fallback = true
'' + (if config.modules.secrets.enable then ''
secret-key-files = ${config.secrets.binary-cache-private-key}
'' else "");
# nixPath = [
# "nixpkgs=${channel.input}"
# "nixos-config=${../../lib/compat/nixos}"
# "home-manager=${inputs.home}"
# ];
localRegistry = {
enable = true;
cacheGlobalRegistry = true;
};
};
nixpkgs.config = {
allowUnfree = true;
};
environment = {
systemPackages = with pkgs; [
nix-index
nixos-option
nixfmt
nixpkgs-fmt
nix-du
comma
(writeScriptBin "wherenix" ''
#!/usr/bin/env bash
${unixtools.whereis}/bin/whereis "''${@}" \
| ${gawk}/bin/awk '{ print substr($0, length($1)+2) }' \
| ${findutils}/bin/xargs -r ${coreutils}/bin/readlink -f \
| ${coreutils}/bin/sort \
| ${coreutils}/bin/uniq
'')
];
shellAliases =
let ifSudo = mkIf config.security.sudo.enable;
in
{
# nix
n = "nix";
np = "n profile";
ni = "np install";
nr = "np remove";
ns = "n search --no-update-lock-file";
nf = "n flake";
nepl = "n repl '<nixpkgs>'";
srch = "ns nixos";
nrb = ifSudo "sudo nixos-rebuild";
mn = ''
manix "" | grep '^# ' | sed 's/^# \(.*\) (.*/\1/;s/ (.*//;s/^# //' | sk --preview="manix '{}'" | xargs manix
'';
# fix nixos-option
# nixos-option = "nixos-option -I nixpkgs=${self}/lib/compat";
};
};
}