infra/roles/device/default.nix

42 lines
964 B
Nix

{ inputs, lib, ... }:
{
imports = [
inputs.disko.nixosModules.disko
./firewall.nix
./network.nix
./secrets.nix
./sudo.nix
./users.nix
]
++ import ../../modules/top-level.nix;
nix =
let
flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;
in
{
registry = lib.mapAttrs (_: flake: { inherit flake; }) flakeInputs;
nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
settings = {
warn-dirty = false;
trusted-users = [ "@wheel" ];
experimental-features = [
"nix-command"
"flakes"
];
substituters = [
"https://cache.garnix.io"
"https://nix-community.cachix.org"
];
trusted-public-keys = [
"cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
];
};
};
}