mirror of
https://github.com/LnL7/nix-darwin.git
synced 2024-12-14 11:57:34 +00:00
53 lines
1.2 KiB
Nix
53 lines
1.2 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
|
|
cfg = config.services.nix-daemon;
|
|
|
|
in
|
|
|
|
{
|
|
options = {
|
|
services.nix-daemon = {
|
|
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = "Whether to activate system at boot time.";
|
|
};
|
|
|
|
tempDir = mkOption {
|
|
type = types.path;
|
|
default = "/tmp";
|
|
description = "The TMPDIR to use for nix-daemon.";
|
|
};
|
|
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
environment.extraInit = ''
|
|
# Set up secure multi-user builds: non-root users build through the
|
|
# Nix daemon.
|
|
if [ "$USER" != root -o ! -w /nix/var/nix/db ]; then
|
|
export NIX_REMOTE=daemon
|
|
fi
|
|
'';
|
|
|
|
launchd.daemons.nix-daemon = {
|
|
serviceConfig.Program = "${config.nix.package}/bin/nix-daemon";
|
|
serviceConfig.KeepAlive = true;
|
|
serviceConfig.ProcessType = "Background";
|
|
serviceConfig.LowPriorityIO = config.nix.daemonIONice;
|
|
serviceConfig.Nice = config.nix.daemonNiceLevel;
|
|
serviceConfig.SoftResourceLimits.NumberOfFiles = 4096;
|
|
|
|
serviceConfig.EnvironmentVariables = config.nix.envVars
|
|
// { CURL_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt"; }
|
|
// { TMPDIR = "${cfg.tempDir}"; };
|
|
};
|
|
};
|
|
}
|