mirror of
https://github.com/callumio/nixfiles.git
synced 2025-12-17 03:29:20 +00:00
Security vuln: - https://lobste.rs/s/ixb3v7/nix_2_24_is_vulnerable_remote_privilege - https://puckipedia.com/7hkj-98sq/qixt
31 lines
782 B
Nix
31 lines
782 B
Nix
{
|
|
pkgs,
|
|
inputs,
|
|
...
|
|
}: {
|
|
nix = {
|
|
package = pkgs.nixVersions.nix_2_23;
|
|
registry.nixpkgs.flake = inputs.nixpkgs;
|
|
gc = {
|
|
automatic = true;
|
|
dates = "weekly";
|
|
options = "--delete-older-than 7d";
|
|
};
|
|
extraOptions = "gc-keep-outputs = true";
|
|
settings = {
|
|
experimental-features = ["nix-command" "flakes" "auto-allocate-uids"];
|
|
auto-optimise-store = true;
|
|
auto-allocate-uids = true;
|
|
|
|
substituters = [
|
|
"https://nix-community.cachix.org"
|
|
"https://callumio-public.cachix.org"
|
|
];
|
|
|
|
trusted-public-keys = [
|
|
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
|
|
"callumio-public.cachix.org-1:VucOSl7vh44GdqcILwMIeHlI0ufuAnHAl8cO1U/7yhg="
|
|
];
|
|
};
|
|
};
|
|
}
|