gistfile1.txt

{ config, lib, pkgs, ... }:

with lib;

let
  environment = concatStringsSep " "
    [ "NIX_REMOTE=daemon"
      "NIX_SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
    ];
in

{
  nixpkgs.overlays = [
    (import ./overlays)
  ];

  nixpkgs.config.allowUnfree = true;

  # Used for backwards compatibility, please read the changelog before changing.
  # $ darwin-rebuild changelog
  system.stateVersion = 2;

  nix.binaryCaches = [ https://hydra.home.dhess.net/ ];
  nix.binaryCachePublicKeys = [ "hydra.home.dhess.net-1:LeRvLk/My/rh6o91utCC4/ZyB43E8HyyllK45Sovotg=" ];

  nix.trustedUsers = [ "@admin" ];

  nix.extraOptions = ''
    gc-keep-derivations = true
    gc-keep-outputs = true
  '';

  #nix.package = pkgs.nixUnstable;

  users.knownUsers = [ "nixbld1" "nixbld2" "nixbld3" "nixbld4" "nixbld5" "nixbld6" "nixbld7" "nixbld8" "nixbld9" "nixbld10" "nixbld11" "nixbld12" "nixbld13" "nixbld14" "nixbld15" "nixbld16" "nixbld17" "nixbld18" "nixbld19" "nixbld20" "nixbld21" "nixbld22" "nixbld23" "nixbld24" "nixbld25" "nixbld26" "nixbld27" "nixbld28" "nixbld29" "nixbld30" "nixbld31" "nixbld32" ];
  users.nix.nrBuildUsers = 32;

  # This is more or less the same as the default, except that we put
  # darwin-configuration.nix in $HOME/.config/nixpkgs, rather than the
  # deprecated .nixpkgs location.
  nix.nixPath = [
    "darwin-config=$HOME/.config/nixpkgs/darwin-configuration.nix"
    "/nix/var/nix/profiles/per-user/root/channels"
    "$HOME/.nix-defexpr/channels"
    "nixpkgs=$HOME/git/nixpkgs-channels"
  ];

  # Create /etc/bashrc that loads the nix-darwin environment.
  programs.bash.enable = true;
  programs.bash.enableCompletion = false;

  # Recreate /run/current-system symlink after boot.
  services.activate-system.enable = true;

  services.nix-daemon.enable = true;

  imports = [
    ./darwin-per-machine-config.nix
  ];

  system.activationScripts.postActivation.text = ''
    touch /nix/.metadata_never_index
  '';

}