system/modules/darwin/default.nix at master · kclejeune/system · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
{
  inputs,
  config,
  pkgs,
  lib,
  ...
}:
{
  imports = [
    ../common.nix
    ./brew.nix
    ./preferences.nix
  ];

  system.primaryUser = config.user.name;

  nix.enable = false;
  nix.package = pkgs.nix;
  determinateNix = {
    enable = true;
    customSettings = {
      extra-trusted-users = [
        "${config.user.name}"
        "@admin"
        "@root"
        "@sudo"
        "@wheel"
        "@staff"
      ];
      lazy-trees = false;
      keep-outputs = true;
      keep-derivations = true;
      extra-experimental-features = "external-builders nix-command flakes";
    };
    determinateNixd = {
      authentication.additionalNetrcSources = [ "/etc/nix/netrc" ];
      garbageCollector.strategy = "automatic";
      builder.state = "enabled";
    };
  };

  hm.imports = [ ../home-manager/1password.nix ];

  hm.home.sessionVariables = {
    SDKROOT = "$(xcrun --show-sdk-path)";
  };

  hm.home.sessionSearchVariables = {
    LIBRARY_PATH = [
      "${config.homebrew.prefix}/lib"
      "$SDKROOT/usr/lib"
      "/usr/local/lib"
      "/usr/lib"
    ];
    CPATH = [
      "${config.homebrew.prefix}/include"
      "$SDKROOT/usr/include"
      "/usr/local/include"
      "/usr/lib"
    ];
  };

  hm.nix.registry = {
    darwin.flake = inputs.darwin;
  };

  security.pam.services.sudo_local.touchIdAuth = true;

  # Used for backwards compatibility, please read the changelog before changing.
  # $ darwin-rebuild changelog
  system.stateVersion = 5;
}