server7: add Nix signing post-build-hook

This commit is contained in:
Ehmry - 2020-04-15 18:56:00 +02:00
parent d2f65be2e4
commit c0970654bb

View File

@ -81,9 +81,17 @@ in {
nix = { nix = {
package = pkgs.nixFlakes; package = pkgs.nixFlakes;
extraOptions = "experimental-features = nix-command flakes ca-references";
gc.automatic = true; gc.automatic = true;
optimise.automatic = true; optimise.automatic = true;
extraOptions = ''
experimental-features = nix-command flakes ca-references
post-build-hook = ${
pkgs.writeScript "post-build-sign-paths" ''
#!${pkgs.runtimeShell}
nix sign-paths --key-file /var/lib/nix-serve.key $OUT_PATHS
''
}
'';
}; };
virtualisation.docker.enable = true; virtualisation.docker.enable = true;