nixcache: modularize

This commit is contained in:
colin 2022-11-22 03:07:11 +00:00
parent dc21b0d68c
commit ed52b5f251
2 changed files with 7 additions and 1 deletions

View File

@ -3,4 +3,6 @@
imports = [
./hardware
];
sane.nixcache.enable-trusted-keys = true;
}

View File

@ -20,6 +20,10 @@ in
default = false;
type = types.bool;
};
sane.nixcache.enable-trusted-keys = mkOption {
default = config.sane.nixcache.enable;
type = types.bool;
};
};
config = {
@ -34,7 +38,7 @@ in
"https://cache.nixos.org/"
];
# always trust our keys (so one can explicitly use a substituter even if it's not the default
nix.settings.trusted-public-keys = [
nix.settings.trusted-public-keys = mkIf cfg.enable-trusted-keys [
"nixcache.uninsane.org:r3WILM6+QrkmsLgqVQcEdibFD7Q/4gyzD9dGT33GP70="
"desko:Q7mjjqoBMgNQ5P0e63sLur65A+D4f3Sv4QiycDIKxiI="
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="