Finalize working configs and prior to adding secrets

System configurations in a known good state. Secrets still have to be
integrated, at this point the nixos-anywhere project will likely handle
this to keep the bootstrap completely automatic since it can copy ssh
host keys to the host prior to install/activation. This would work
nicely with the sops secret module, but a good way to manage host keys
for each machine still has to be decided.

1 files changed, 13 insertions, 13 deletions

diff --git a/modules/xnet/default.nix b/modules/xnet/default.nix
index 6cb2e5e..a2fb336 100644
--- a/modules/xnet/default.nix
+++ b/modules/xnet/default.nix
@@ -16,24 +16,24 @@ in
   i18n.defaultLocale = mkDefault "en_US.UTF-8";
   time.timeZone = mkDefault "America/Toronto";
 
-  nix.settings = {
-    auto-optimise-store = true;
-    experimental-features = [ "nix-command" "flakes" ];
-    warn-dirty = false;
-  };
+  nix = {
+    settings = {
+      allowUnfree = true;
+      auto-optimise-store = true;
+      experimental-features = [ "nix-command" "flakes" ];
+      warn-dirty = false;
 
-  nix.gc = {
-    automatic = true;
-    options = mkDefault "--delete-older-than 30d";
+      # timeout fast from binary cache
+      connect-timeout = 5;
+    };
+    gc = {
+      automatic = true;
+      options = mkDefault "--delete-older-than 30d";
+    };
   };
 
   documentation = {
     doc.enable = mkDefault false;
     info.enable = mkDefault false;
   };
-
-  security.sudo = {
-    execWheelOnly = true;
-    extraConfig = "Defaults lecture = never";
-  };
 }