feat: prepare for Determinate Nix installation

Author: aiotter

default.nix

@@ -2,33 +2,12 @@
 
 {
   imports = [
+    modules/nix-conf.nix
     modules/snmp
   ];
 
   system.primaryUser = "aiotter";
 
-  nix = {
-    package = pkgs.nixVersions.stable;
-    registry = {
-      nixpkgs.flake = flakeInputs.nixpkgs;
-    };
-    settings = {
-      sandbox = true;
-      substituters = [
-        "https://nix-community.cachix.org"
-        "https://aiotter.cachix.org"
-      ];
-      trusted-public-keys = [
-        "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-        "aiotter.cachix.org-1:YaYTZbiaiBIUYsJPwhcgG9yXXWd15xPtGmvq7DEmKnE="
-      ];
-      trusted-users = [ "@admin" ];
-      experimental-features = "nix-command flakes pipe-operators";
-      bash-prompt = ''[nix]\W$ '';
-      warn-dirty = false;
-    };
-  };
-
   environment.shellInit = ''
     # Load HomeManager
     [ -e ~/.nix-profile/etc/profile.d/hm-session-vars.sh ] \

flake.lock

@@ -2,7 +2,8 @@
   description = "aiotter's system settings for macOS";
 
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixpkgs-unstable";
+    determinate.url = "https://flakehub.com/f/DeterminateSystems/determinate/3";
+    nixpkgs.follows = "determinate/nixpkgs";
     flake-utils.url = "github:numtide/flake-utils";
     darwin = {
       url = "github:lnl7/nix-darwin/master";
@@ -14,15 +15,19 @@
     };
   };
 
-  outputs = inputs@{ self, nixpkgs, flake-utils, darwin, mac-app-util, ... }:
+  outputs = inputs@{ self, nixpkgs, flake-utils, darwin, determinate, mac-app-util, ... }:
     let
       darwinSystems = with flake-utils.lib.system; [ x86_64-darwin aarch64-darwin ];
     in
     flake-utils.lib.eachSystem darwinSystems (system: rec {
       darwinConfigurations.default = darwin.lib.darwinSystem
         {
           inherit system;
-          modules = [ ./. mac-app-util.darwinModules.default ];
+          modules = [
+            determinate.darwinModules.default
+            mac-app-util.darwinModules.default
+            ./.
+          ];
           specialArgs = { flakeInputs = inputs; };
         };
 

flake.nix

@@ -0,0 +1,23 @@
+{ lib, flakeInputs, ... }:
+
+{
+  # Let Determinate Nix handle Nix configuration
+  nix.enable = false;
+
+  determinate-nix.customSettings = {
+    extra-substituters = [
+      "https://nix-community.cachix.org"
+      "https://aiotter.cachix.org"
+    ];
+
+    extra-trusted-public-keys = [
+      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "aiotter.cachix.org-1:YaYTZbiaiBIUYsJPwhcgG9yXXWd15xPtGmvq7DEmKnE="
+    ];
+
+    extra-trusted-users = [ "@admin" ];
+    experimental-features = "nix-command flakes pipe-operators";
+    bash-prompt = ''[nix]\W$ '';
+    warn-dirty = false;
+  };
+}