modules

1 files changed, 29 insertions, 2 deletions

diff --git a/modules/nix.nix b/modules/nix.nix
index 1c3a435..6de07bb 100644
--- a/modules/nix.nix
+++ b/modules/nix.nix
@@ -6,16 +6,29 @@
       http-connections = 0;
       warn-dirty = false;
       log-lines = 50;
-      # sandbox = "relaxed";
+      sandbox = true;
+      sandbox-fallback = false;
       extra-sandbox-paths = [ config.programs.ccache.cacheDir ];
+      keep-going = true;
+      accept-flake-config = false;
+
+      system-features = [
+        "nixos-test"
+        "kvm"
+        "recursive-nix"
+        "big-parallel"
+      ];
 
       trusted-users = [
+        "root"
         "@wheel"
+        "nix-builder"
       ];
 
       allowed-users = [
         "root"
         "@wheel"
+        "nix-builder"
       ];
 
       substituters = [
@@ -25,6 +38,7 @@
         "https://nyx.chaotic.cx/"
         "https://nixpkgs-wayland.cachix.org"
         "https://cuda-maintainers.cachix.org"
+        "https://nixpkgs-unfree.cachix.org"
       ];
 
       trusted-public-keys = [
@@ -33,18 +47,31 @@
         "nyx.cachix.org-1:HfnXSw4pj95iI/n17rIDy40agHj12WfF+Gqk6SonIT8="
         "nixpkgs-wayland.cachix.org-1:3lwxaILxMRkVhehr5StQprHdEo4IrE8sRho9R9HOLYA="
         "cuda-maintainers.cachix.org-1:0dq3bujKpuEPMCX6U4WylrUDZ9JyUG0VpVZa7CNfq5E="
+        "nixpkgs-unfree.cachix.org-1:hqvoInulhbV4nJ9yJOEr+4wxhDV4xq2d1DK7S6Nj6rs="
       ];
 
       experimental-features = [
         "nix-command"
         "flakes"
+        "recursive-nix"
+        "ca-derivations"
+        "auto-allocate-uids"
+        "cgroups"
+        "repl-flake"
+        "no-url-literals"
+        "dynamic-derivations"
       ];
     };
 
     gc = {
       automatic = true;
-      dates = "daily";
+      dates = "03:00";
       options = "--delete-older-than 3d";
     };
+
+    optimise = {
+      automatic = true;
+      dates = [ "04:00" ];
+    };
   };
 }