Commit e8edb24cc40d

Vincent Demeester <vincent@sbr.pm>
2026-06-10 13:15:33
feat(aomi): manage nix.custom.conf via system-manager
Add trusted-users and okinawa Harmonia cache to nix.custom.conf, which is included by the Determinate Nix installer's nix.conf.
main
1 parent 4dfa4a3
Changed files (1)
systems
aomi
system.nix
systems/aomi/system.nix
@@ -25,6 +25,16 @@ in
       git
     ];
 
+    # Nix custom config (Determinate installer includes nix.custom.conf)
+    environment.etc."nix/nix.custom.conf" = {
+      text = ''
+        trusted-users = root @wheel
+        extra-substituters = http://okinawa.vpn:5000
+        extra-trusted-public-keys = cache.okinawa.home:gp+IG0OaO4L/J0drL8OwmDtMPmdUq4kfLwg3mR8BkCs=
+      '';
+      mode = "0644";
+    };
+
     # WireGuard: config managed by system-manager, service by Fedora native wg-quick@wg0
     # Nix-store binaries lack proper SELinux context for network admin ops,
     # so we use Fedora's wg-quick which runs with the correct domain.