darwin/trusted-nix-caches: port over from NixOS

This commit is contained in:
Jörg Thalheim 2024-06-30 15:42:29 +02:00 committed by mergify[bot]
parent c64a972285
commit 3207f2e66e
3 changed files with 19 additions and 0 deletions

View File

@ -8,4 +8,5 @@ exposeModules ./. [
./mixins/nix-experimental.nix
./mixins/telegraf.nix
./mixins/terminfo.nix
./mixins/trusted-nix-caches.nix
]

View File

@ -0,0 +1,14 @@
{
# Caches in trusted-substituters can be used by unprivileged users i.e. in
# flakes but are not enabled by default.
nix.settings.trusted-substituters = [
"https://nix-community.cachix.org"
"https://cache.garnix.io"
"https://numtide.cachix.org"
];
nix.settings.trusted-public-keys = [
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
"cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
"numtide.cachix.org-1:2ps1kLBUWjxIneOy1Ik6cQjb41X0iXVXeHigGmycPPE="
];
}

View File

@ -15,3 +15,7 @@ This is useful when connecting to a server via SSH.
### `darwinModules.mixins-nix-experimental`
Enables all experimental features in nix, that are known safe to use (i.e. are only used when explicitly requested in a build).
### `darwinModules.mixins-trusted-nix-caches`
Add the common list of public nix binary caches that we trust.