From f5ed731abbc38d765333b005b9815a5f6d3e59c2 Mon Sep 17 00:00:00 2001
From: Kleidi Bujari <mail@4kb.net>
Date: Tue, 10 Dec 2024 13:24:51 -0500
Subject: Finalize working configs and prior to adding secrets

System configurations in a known good state. Secrets still have to be
integrated, at this point the nixos-anywhere project will likely handle
this to keep the bootstrap completely automatic since it can copy ssh
host keys to the host prior to install/activation. This would work
nicely with the sops secret module, but a good way to manage host keys
for each machine still has to be decided.
---
 modules/xnet/default.nix | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

(limited to 'modules/xnet/default.nix')

diff --git a/modules/xnet/default.nix b/modules/xnet/default.nix
index 6cb2e5e..a2fb336 100644
--- a/modules/xnet/default.nix
+++ b/modules/xnet/default.nix
@@ -16,24 +16,24 @@ in
   i18n.defaultLocale = mkDefault "en_US.UTF-8";
   time.timeZone = mkDefault "America/Toronto";
 
-  nix.settings = {
-    auto-optimise-store = true;
-    experimental-features = [ "nix-command" "flakes" ];
-    warn-dirty = false;
-  };
+  nix = {
+    settings = {
+      allowUnfree = true;
+      auto-optimise-store = true;
+      experimental-features = [ "nix-command" "flakes" ];
+      warn-dirty = false;
 
-  nix.gc = {
-    automatic = true;
-    options = mkDefault "--delete-older-than 30d";
+      # timeout fast from binary cache
+      connect-timeout = 5;
+    };
+    gc = {
+      automatic = true;
+      options = mkDefault "--delete-older-than 30d";
+    };
   };
 
   documentation = {
     doc.enable = mkDefault false;
     info.enable = mkDefault false;
   };
-
-  security.sudo = {
-    execWheelOnly = true;
-    extraConfig = "Defaults lecture = never";
-  };
 }
-- 
cgit v1.3.1