dotfiles/configuration.nix at main · zidhuss/dotfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
{
  pkgs,
  nixpkgs,
  lib,
  ...
}: {
  users.users."abry" = {
    home = "/Users/abry";
  };

  environment.systemPackages = with pkgs; [
    curl
    imagemagick
    wezterm
    nh
  ];

  # Flake pinning
  nix.registry.nixpkgs.flake = nixpkgs;

  programs.zsh.enable = true;
  programs.fish.enable = true;
  security.pam.services.sudo_local = {
    touchIdAuth = true;
    watchIdAuth = true;
  };

  nixpkgs.hostPlatform = "aarch64-darwin";

  nixpkgs.config.allowUnfreePredicate = pkg:
    builtins.elem (lib.getName pkg) [
      "copilot-language-server"
    ];

  programs.ssh.knownHosts = {
    nixbuild = {
      hostNames = ["eu.nixbuild.net"];
      publicKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPIQCZc54poJ8vqawd8TraNryQeJnvH1eLpIDgbiqymM";
    };
  };

  nix = {
    enable = true;
    distributedBuilds = true;
    buildMachines = [
      {
        hostName = "eu.nixbuild.net";
        systems = [
          "x86_64-linux"
          "aarch64-linux"
          "armv7l-linux"
        ];
        maxJobs = 100;
        supportedFeatures = ["benchmark" "big-parallel"];
      }
    ];

    settings = {
      experimental-features = "nix-command flakes";
      trusted-users = ["@admin"];
      substituters = ["ssh://eu.nixbuild.net"];
      trusted-public-keys = ["nixbuild.net/WA6DCE-1:QJWjvXvACfwkrqte0z4IL0B9ZXZMmaQgmCEmmjScUGM="];
      builders-use-substitutes = true;
    };
  };

  ids.gids.nixbld = 30000;
  system.stateVersion = 5;
}