nix: enable remote building

1 files changed, 33 insertions, 0 deletions

diff --git a/config/nix/default.nix b/config/nix/default.nix
new file mode 100644
index 0000000..c930095
--- /dev/null
+++ b/config/nix/default.nix
@@ -0,0 +1,33 @@
+{lib, ...}: {
+  imports = [./remote-builds.nix];
+
+  personal.nix = {
+    enable = true;
+    autoUpgrade = {
+      enable = true;
+      autoUpdateInputs = ["nixpkgs" "nixpkgs-unstable"];
+    };
+    gc.enable = true;
+    flake = "git+file:///etc/nixos/";
+  };
+  nix.settings.max-jobs = lib.mkDefault 1;
+  nixpkgs.flake = {
+    setNixPath = true;
+    setFlakeRegistry = true;
+  };
+
+  systemd.services.nixos-upgrade = let
+    mkForce = lib.mkOverride 51;
+  in {
+    # restart at most once every hour
+    serviceConfig = {
+      Restart = "on-failure";
+      RestartSec = "5sec";
+      MemoryAccounting = true;
+      MemoryHigh = "1G";
+      MemoryMax = "1.5G";
+    };
+    startLimitBurst = mkForce 1;
+    startLimitIntervalSec = mkForce 3600;
+  };
+}