nixos

commit dfcd0ef73f210152390e383cdf848a7cedb09d03
parent f964961fd77fa09bbc8f90ffaa976421f7fbd0c1
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 12 Aug 2023 15:26:54 +0200

Build locally and set system and enable the sandbox

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
12
++++++++++++

1 file changed, 12 insertions(+), 0 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -41,6 +41,12 @@
       # Disable if you don't want unfree packages
       allowUnfree = true;
     };
+
+    nixpkgs.localSystem = {
+      #gcc.arch = "skylake";
+      #gcc.tune = "skylake";
+      system = "aarch64-linux";
+    };
   };
 
   nix = {
@@ -57,6 +63,8 @@
       experimental-features = "nix-command flakes";
       # Deduplicate and optimize nix store
       auto-optimise-store = true;
+      # Sandbox
+      sandbox = true;
     };
 
     gc = {
@@ -64,6 +72,9 @@
       dates = "weekly";
       options = "--delete-older-than 60d";
     };
+
+    # Build locally
+    binaryCaches = [ ];
   };
 
   # General stuff
@@ -72,6 +83,7 @@
   fonts.fontconfig.enable = lib.mkDefault false;
   environment.variables.BROWSER = "echo";
   sound.enable = false;
+  powerManagement.cpuFreqGovernor = "performance";
 
   systemd = {
     # Given that our systems are headless, emergency mode is useless.