diff --git a/flake.lock b/flake.lock index d353e63..fed1e52 100644 --- a/flake.lock +++ b/flake.lock @@ -42,11 +42,11 @@ ] }, "locked": { - "lastModified": 1651916036, - "narHash": "sha256-UuD9keUGm4IuVEV6wdSYbuRm7CwfXE63hVkzKDjVsh4=", + "lastModified": 1657835815, + "narHash": "sha256-CnZszAYpNKydh6N7+xg+eRtWNVoAAGqc6bg+Lpgq1xc=", "owner": "LnL7", "repo": "nix-darwin", - "rev": "2f2bdf658d2b79bada78dc914af99c53cad37cba", + "rev": "54a24f042f93c79f5679f133faddedec61955cf2", "type": "github" }, "original": { @@ -146,7 +146,7 @@ "nixos" ], "nixpkgs-unstable": [ - "latest" + "nixos" ] }, "locked": { @@ -169,11 +169,11 @@ "rust-analyzer-src": "rust-analyzer-src" }, "locked": { - "lastModified": 1657693741, - "narHash": "sha256-pllDKNpP2LIMlJ/dxOkcn8PGwS597ZarfEWf6F6rfQ0=", + "lastModified": 1658730563, + "narHash": "sha256-NDaSjaNdynCM02hRLOL76CKeD5Bxjxe8aNsD6AQ4U5I=", "owner": "nix-community", "repo": "fenix", - "rev": "fd120f5d166057326c50c70b13531c2678076fa3", + "rev": "80981ee71b32ce0747d22b1fd2dcd895219f5c1d", "type": "github" }, "original": { @@ -342,18 +342,18 @@ "home": { "inputs": { "nixpkgs": [ - "latest" + "nixos" ], "utils": [ "flake-utils" ] }, "locked": { - "lastModified": 1657661746, - "narHash": "sha256-kreOBAylgG/vCPHeikjftL7GjBvX7g/A/M7WBaHvHVw=", + "lastModified": 1658924727, + "narHash": "sha256-Fhh9FK9CvuCLxG1WkWJPoendDeXKI4gHYTfezo1n2Zg=", "owner": "nix-community", "repo": "home-manager", - "rev": "602f2ce59c0150755fa30a23e6921a1c7453f8c7", + "rev": "0e2f7876d2f2ae98a67d89a8bef8c49332aae5af", "type": "github" }, "original": { @@ -381,16 +381,16 @@ }, "latest": { "locked": { - "lastModified": 1657533762, - "narHash": "sha256-/cxTFSMmpAb8tBp1yVga1fj+i8LB9aAxnMjYFpRMuVs=", + "lastModified": 1658969450, + "narHash": "sha256-/p7aVWbYx5SPUK/HG4SUP9D5JBYi21Ou/QDuKKw8aRY=", "owner": "nixos", "repo": "nixpkgs", - "rev": "38860c9e91cb00f4d8cd19c7b4e36c45680c89b5", + "rev": "6372876b362b94b926e224aaa3ab0ed11551026a", "type": "github" }, "original": { "owner": "nixos", - "ref": "nixos-unstable", + "ref": "master", "repo": "nixpkgs", "type": "github" } @@ -417,27 +417,27 @@ }, "nixos": { "locked": { - "lastModified": 1657476024, - "narHash": "sha256-4xnAf6VxE/efOwHt/MsG/g1gmpT78n/8oHqF1atzNjI=", + "lastModified": 1658826464, + "narHash": "sha256-94ZTF0uIX/iZdiD4RJ5f933ak/OM4XLl7hF+gCa4Iuk=", "owner": "nixos", "repo": "nixpkgs", - "rev": "cf034a867e08b7e083df1658c915c58456dbbde2", + "rev": "ce49cb7792a7ffd65ef352dda1110a4e4a204eac", "type": "github" }, "original": { "owner": "nixos", - "ref": "nixos-22.05", + "ref": "nixos-unstable", "repo": "nixpkgs", "type": "github" } }, "nixos-hardware": { "locked": { - "lastModified": 1656933710, - "narHash": "sha256-SVG8EqY1OTJWBRY4hpct2ZR2Rk0L8hCFkug3m0ABoZE=", + "lastModified": 1658401027, + "narHash": "sha256-z/sDfzsFOoWNO9nZGfxDCNjHqXvSVZLDBDSgzr9qDXE=", "owner": "nixos", "repo": "nixos-hardware", - "rev": "3bf48d3587d3f34f745a19ebc968b002ef5b5c5a", + "rev": "83009edccc2e24afe3d0165ed98b60ff7471a5f8", "type": "github" }, "original": { @@ -448,11 +448,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1657533762, - "narHash": "sha256-/cxTFSMmpAb8tBp1yVga1fj+i8LB9aAxnMjYFpRMuVs=", + "lastModified": 1658648081, + "narHash": "sha256-RL5nr4Xhp0zQeEGG/I3t3FmqaI9QrBg5PH31NF+7A/A=", "owner": "nixos", "repo": "nixpkgs", - "rev": "38860c9e91cb00f4d8cd19c7b4e36c45680c89b5", + "rev": "e494a908e8895b9cba18e21d5fc83362f64b3f6a", "type": "github" }, "original": { @@ -569,11 +569,11 @@ "rust-analyzer-src": { "flake": false, "locked": { - "lastModified": 1657632565, - "narHash": "sha256-jre78eJWnd3L18uLCKbuiZEWohRFDROs5OH34kp8+bs=", + "lastModified": 1658671895, + "narHash": "sha256-WFtdMN7WH5twFZEfBqpgc9PMCMHpgJnZyipDSPfui3U=", "owner": "rust-lang", "repo": "rust-analyzer", - "rev": "4cbf23c192517cfebb0d754987aae95bc683b7a4", + "rev": "7e2b983fd459977e11026683ee4afb9598960a4c", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index abdc68f..829c7a2 100644 --- a/flake.nix +++ b/flake.nix @@ -4,14 +4,14 @@ nixConfig.extra-experimental-features = "nix-command flakes"; inputs = { - nixos.url = "github:nixos/nixpkgs/nixos-22.05"; - latest.url = "github:nixos/nixpkgs/nixos-unstable"; + nixos.url = "github:nixos/nixpkgs/nixos-unstable"; + latest.url = "github:nixos/nixpkgs/master"; flake-utils.url = "github:numtide/flake-utils"; digga.url = "github:divnix/digga"; digga.inputs.nixpkgs.follows = "nixos"; - digga.inputs.nixpkgs-unstable.follows = "latest"; + digga.inputs.nixpkgs-unstable.follows = "nixos"; digga.inputs.latest.follows = "latest"; digga.inputs.nixlib.follows = "nixos"; digga.inputs.home-manager.follows = "home"; @@ -19,7 +19,7 @@ home.url = "github:nix-community/home-manager/master"; # home.url = "path:/home/mae/home-manager"; - home.inputs.nixpkgs.follows = "latest"; + home.inputs.nixpkgs.follows = "nixos"; home.inputs.utils.follows = "flake-utils"; darwin.url = "github:LnL7/nix-darwin"; diff --git a/profiles/core/default.nix b/profiles/core/default.nix index 2d77fd3..e93f987 100644 --- a/profiles/core/default.nix +++ b/profiles/core/default.nix @@ -2,26 +2,12 @@ let inherit (lib) fileContents; in { - - # Cachix - nix = { - binaryCaches = [ - "https://cache.nixos.org/" - "https://nix-community.cachix.org" - ]; - binaryCachePublicKeys = [ - "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" - ]; - }; - # For rage encryption, all hosts need a ssh key pair services.openssh = { enable = true; openFirewall = lib.mkDefault false; }; - # This is just a representation of the nix default - nix.systemFeatures = [ "nixos-test" "benchmark" "big-parallel" "kvm" ]; nix.registry.nixpkgs.flake = self.inputs.nixos; nix.registry.latest.flake = self.inputs.latest; nix.registry.pwnix.flake = self.inputs.pwnix; @@ -93,17 +79,26 @@ in }; nix = { + settings = { + substituters = [ + "https://cache.nixos.org/" + "https://nix-community.cachix.org" + ]; + trusted-public-keys = [ + "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" + ]; + + system-features = [ "nixos-test" "benchmark" "big-parallel" "kvm" ]; + + sandbox = true; + trusted-users = [ "root" "@wheel" ]; + }; + # Improve nix store disk usage - autoOptimiseStore = true; + settings.auto-optimise-store = true; gc.automatic = true; optimise.automatic = true; - # Prevents impurities in builds - useSandbox = true; - - # give root and @wheel special privileges with nix - trustedUsers = [ "root" "@wheel" ]; - # Generally useful nix option defaults extraOptions = '' keep-outputs = true