forked from emily/nixfiles
25 lines
1.1 KiB
Nix
25 lines
1.1 KiB
Nix
{ lib, pkgs, ... }: {
|
|
kyouma.deployment.auto-upgrade.cache = "daemon";
|
|
nix.gc.options = lib.mkForce "--delete-older-than 60d";
|
|
nix.settings = {
|
|
trusted-users = [ "build" ];
|
|
system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ] ++ lib.optionals pkgs.hostPlatform.isx86_64 [ "gccarch-x86-64-v3" ];
|
|
};
|
|
nix.extraOptions = ''
|
|
min-free = ${builtins.toString (4096 * 1024 * 1024)}
|
|
max-free = ${builtins.toString (8192 * 1024 * 1024)}
|
|
max-substitution-jobs = 20
|
|
max-silent-time = 7200
|
|
'';
|
|
users.users.build = {
|
|
isNormalUser = true;
|
|
shell = pkgs.bash;
|
|
ignoreShellProgramCheck = true;
|
|
openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA/+iN407+HsfHbbC3tfdA8Yf4TZ08qXQMb4tb/SDAs+ emily@card"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/vCXM3IaxJP9v2Y+xcQrQD2IcffgdzqtWhpMjj9Xl5 hydra@seras"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICT0dGyLUjxFnvqUmex+5xUGQ7D4yGHKo267JgApcq0k root@ryuuko"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIDTwCSWYODyvTJxwB6Rahuy0j6s/YYwtQta8bjzG/We root@ryuuko-arch"
|
|
];
|
|
};
|
|
}
|