pluh 🗣

common/boot.nix

@@ -1,4 +1,9 @@
 {
+  fileSystems."/boot" = {
+    label = "BOOT";
+    fsType = "vfat";
+  };
+
   boot = {
     loader = {
       systemd-boot = {

common/nix.nix

@@ -9,9 +9,14 @@
 
     nixPath = lib.mapAttrsToList (key: _: "${key}=flake:${key}") config.nix.registry;
 
+    optimise.automatic = true;
+
     settings = {
-      trusted-users = config.users.normalUsers;
-      experimental-features = "nix-command flakes";
+      trusted-users = ["root"] ++ config.users.normalUsers;
+      experimental-features = [
+        "nix-command"
+        "flakes"
+      ];
       auto-optimise-store = true;
     };
   };

common/puter.nix

@@ -3,7 +3,10 @@
   self,
   ...
 }: {
-  environment.systemPackages = [
-    self.packages.${pkgs.system}.puter
-  ];
+  environment = {
+    systemPackages = [
+      self.packages.${pkgs.system}.puter
+    ];
+    sessionVariables.PUTER_FLAKEREF = "git+https://forgejo@tea.wrz.one/lukas/puter.git";
+  };
 }

common/users.nix

@@ -15,7 +15,8 @@ in {
     users = {
       root = {
         hashedPassword = "!";
-        openssh.authorizedKeys.keys = builtins.attrValues config.pubkeys.hosts;
+        # TODO define this more granularly
+        openssh.authorizedKeys.keys = [];
       };
       ${mainUser} = {
         description = "Lukas Wurzinger";