gistfile1.txt

{ pkgs, ... }:
{
  nix = {
    useSandbox = true;
    gc = {
      automatic = true;
      options = let
        gbFree = 10;
      in "--max-freed $((${toString gbFree} * 1024**3 - 1024 * $(df -P -k /nix/store | tail -n 1 | awk '{ print $4 }')))";
    };
  };

  programs = {
    ssh = {
      knownHosts = [
        {
          hostNames = [ "git.blah.com" "theserverip" ];
          publicKey = ".....";
        }
      ];
    };
  };

  environment.systemPackages = with pkgs; [
    openjdk
    git
  ];

  users = {
    users = {
      builduser = {
        isNormalUser = true;
        uid = 1000;
        createHome = true;
        extraGroups = [ "docker" ];
        home = "/home/builduser";
        openssh.authorizedKeys.keys = [
          ...
        ];
      };
    };
  };
  virtualisation.docker = {
    enable = true;
    autoPrune = {
      enable = true;
      dates = "daily";
    };
  };
}