Commit 87210ef67101

Vincent Demeester <vincent@sbr.pm>
2024-05-13 16:17:57
nix: update nix options (using nix.settings)
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent 0e95f7a
Changed files (2)
systems
modules
users
systems/modules/core/nix.nix
@@ -40,7 +40,6 @@ in
   config = mkIf cfg.enable {
     environment.systemPackages = [ pkgs.git ];
     nix = {
-      allowedUsers = [ "@wheel" ];
       settings = {
         cores = cfg.buildCores;
         substituters = cfg.localCaches ++ [
@@ -94,8 +93,11 @@ in
       };
       nrBuildUsers = 32;
       #nrBuildUsers = config.nix.maxJobs * 2;
-      trustedUsers = [ "root" "@wheel" ];
-      useSandbox = true;
+      settings = {
+        sandbox = true;
+        allowed-users = [ "@wheel" ];
+        trusted-users = [ "root" "@wheel" ];
+      };
     };
 
     # `nix-daemon` will hit the stack limit when using `nixFlakes`.
users/vincent/default.nix
@@ -41,7 +41,9 @@ in
   };
 
   nix = {
-    trustedUsers = [ "vincent" ];
+    settings = {
+      trusted-users = [ "vincent" ];
+    };
     sshServe.keys = authorizedKeys;
   };