Cleanup

nixos/hosts/default.nix

@@ -1,15 +1,15 @@
 {inputs, ...}: let
-  systems = {
+  systems = ["silver"];
-    # eidola = import ./eidola {inherit inputs;};
-    silver = import ./silver {inherit inputs;};
-  };
 
   inherit (inputs.nixpkgs) lib;
 
   makeNixosConfigurations = systems:
-    lib.mapAttrs
+    lib.listToAttrs (lib.map
-    (name: system:
+      (name: let
-      lib.nixosSystem {
+        system = import ./${name} {inherit inputs;};
+      in {
+        inherit name;
+        value = lib.nixosSystem {
           inherit (system) system;
 
           modules =
@@ -23,8 +23,9 @@
 
               ../modules
             ];
+        };
       })
-    systems;
+      systems);
 
   makeDeployRsNodes = systems:
     lib.mapAttrs

nixos/hosts/eidola/disk-config.nix

@@ -22,7 +22,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
-                mountOptions = ["defaults"];
+                mountOptions = ["defaults" "umask=0077"];
               };
             };
 

nixos/hosts/silver/disk-config.nix

@@ -22,7 +22,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
-                mountOptions = ["defaults"];
+                mountOptions = ["defaults" "umask=0077"];
               };
             };
 

nixos/modules/default.nix

@@ -1,5 +1,6 @@
 {
   inputs,
+  config,
   pkgs,
   ...
 }: {
@@ -40,16 +41,17 @@
       dates = ["daily"];
     };
 
+    settings = {
       # Make sure flakes are enabled
-    settings.experimental-features = ["nix-command" "flakes"];
+      experimental-features = ["nix-command" "flakes"];
+      flake-registry = "";
+      nix-path = config.nix.nixPath;
+      # Trust wheel
+      trusted-users = ["@wheel"];
+    };
     extraOptions = ''
       keep-outputs = true
       keep-derivations = true
-
-      flake-registry = ${builtins.toFile "flake-registry" (builtins.toJSON {
-        version = 2;
-        flakes = [];
-      })}
     '';
     nixPath = ["nixpkgs=${pkgs.path}"];
     registry = {