Lix

package = pkgs.lixPackageSets.git.lix;

# Automatically optimise symlinks
# Disable auto-optimise-store because of this issue:
# https://github.com/NixOS/nix/issues/7273
# but we use lix which has a fix for this issue:
# https://gerrit.lix.systems/c/lix/+/2100
auto-optimise-store = true;

# Set up garbage collection to run automatically,
# removing packages after 3 days
gc = {
  automatic = true;
  options = "--delete-older-than 3d";
};

# Free up to 20GiB whenever there is less than 5GB left.
# This setting is in bytes, so we multiply with 1024 by 3
min-free = 5 * 1024 * 1024 * 1024;
max-free = 20 * 1024 * 1024 * 1024;

# Pin the registry to avoid downloading and evaluating a new nixpkgs
# version everytime
registry = (mapAttrs (_: flake: { inherit flake; }) flakeInputs) // {
  nixpkgs = lib.mkForce { flake = inputs.nixpkgs; };
};

# We don't want to track the registry, but we do want to allow the usage
# of the `flake:` references, so we need to enable use-registries
use-registries = true;
flake-registry = "";

# Disable usage of nix channels
channel.enable = false;

# Let the system decide the number of max jobs
max-jobs = "auto";

# Continue building derivations even if one fails
# This is important for keeping a nice cache of derivations
keep-going = true;

# Show more log lines for failed builds
log-lines = 30;

# Build inside sandboxed environments
# We only enable this on Linux because it severely breaks on Darwin
sandbox = pkgs.stdenv.hostPlatform.isLinux;

system-features = [
  "nixos-test"
  "kvm"
  "recursive-nix"
  "big-parallel"
];

# Whether to accept nix configuration from a flake without prompting
# Literally a CVE waiting to happen
accept-flake-config = false;

# Prevent data corruption
transfer.fsckObjects = true;
fetch.fsckObjects = true;
receive.fsckObjects = true;

# Use XDG base directories for all the nix things
use-xdg-base-directories = true;

# This defaults to true, however it slows down evaluation
# We do need it for catppuccin/nix so we keep it enabled
allow-import-from-derivation = true;

# For direnv GC roots
keep-derivations = true;
keep-outputs = true;

# Maximum number of parallel TCP connections used to fetch imports
# and binary caches, 0 means no limit
http-connections = 50;

substituters = [
  "https://nix-community.cachix.org"
]
++ optionals hasCtp [
  "https://catppuccin.cachix.org"
];

trusted-public-keys = [
  "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
]
++ optionals hasCtp [
  "catppuccin.cachix.org-1:noG/4HkbhJb+lUAdKrph6LaozJvAeEEZj4N732IysmU="
];

# Don't warn me if the current working tree is dirty
# I don't need the warning because I'm working on it right now
warn-dirty = false;

let
  sudoers = if (_class == "nixos") then "@wheel" else "@admin";
in
{
  # Users or groups which are allowed to do anything with the Nix daemon
  allowed-users = [ sudoers ];
  # Users or groups which are allowed to manage the nix store
  trusted-users = [ sudoers ];
}