.github/workflows/flake-health-checks.yml

@@ -20,22 +20,3 @@ jobs:
                 skip-push: "true"
             - uses: actions/checkout@v4
             - run: nix flake check --accept-flake-config
-            - run: nix ./utils/attic-push.bash
-    # build-checks:
-    #     name: "Build nix outputs"
-    #     runs-on: ubuntu-latest
-    #     steps:
-    #         - uses: DeterminateSystems/nix-installer-action@main
-    #         - name: Setup Attic cache
-    #           uses: ryanccn/attic-action@v0
-    #           with:
-    #             endpoint: ${{ secrets.ATTIC_ENDPOINT }}
-    #             cache: ${{ secrets.ATTIC_CACHE }}
-    #             token: ${{ secrets.ATTIC_TOKEN }}
-    #             skip-push: "true"
-    #         - uses: actions/checkout@v4
-    #         - name: Build all outputs
-    #           run: nix run git+https://nayeonie.com/ahuston-0/flake-update-diff -- --build .
-    #         - name: Push to Attic
-    #           run: nix ./utils/attic-push.bash
-    #           continue-on-error: true

.github/workflows/flake-update.yml

@@ -11,8 +11,11 @@ jobs:
         steps:
             - name: Checkout repository
               uses: actions/checkout@v4
-            - name: Install nix
-              uses: https://github.com/DeterminateSystems/nix-installer-action@main
+            - name: Get Latest Determinate Nix Installer binary
+              id: latest-installer
+              uses: sigyl-actions/gitea-action-get-latest-release@main
+              with:
+                repository: ahuston-0/determinate-nix-installer
             - name: Setup Attic cache
               uses: ryanccn/attic-action@v0
               with:
@@ -20,6 +23,10 @@ jobs:
                 cache: ${{ secrets.ATTIC_CACHE }}
                 token: ${{ secrets.ATTIC_TOKEN }}
                 skip-push: "true"
+            - name: Install nix
+              uses: https://github.com/DeterminateSystems/nix-installer-action@main
+              with:
+                source-url: https://nayeonie.com/ahuston-0/determinate-nix-mirror/releases/download/${{ steps.latest-installer.outputs.release }}/nix-installer-x86_64-linux
             - name: Get pre-snapshot of evaluations
               run: nix ./utils/eval-to-drv.sh pre
             - name: Update flake.lock
@@ -100,9 +107,6 @@ jobs:
                 pr-labels: | # Labels to be set on the PR
                     dependencies
                     automated
-            - name: Push to Attic
-              run: nix ./utils/attic-push.bash
-              continue-on-error: true
             - name: Print PR number
               run: |
                 echo "Pull request number is ${{ steps.create-pull-request.outputs.pull-request-number }}."

.github/workflows/nix-fmt.yml

@@ -20,6 +20,3 @@ jobs:
                 skip-push: "true"
             - uses: actions/checkout@v4
             - run: nix fmt -- --check .
-            - name: Push to Attic
-              run: nix ./utils/attic-push.bash
-              continue-on-error: true

flake.nix

@@ -5,17 +5,17 @@
     substituters = [
       "https://cache.nixos.org/?priority=1&want-mass-query=true"
       "https://nix-community.cachix.org/?priority=10&want-mass-query=true"
-      "https://attic.nayeonie.com/nix-cache"
+      #"https://attic.nayeonie.com/nix-cache"
     ];
     trusted-substituters = [
       "https://cache.nixos.org"
       "https://nix-community.cachix.org"
-      "https://attic.nayeonie.com/nix-cache"
+      #"https://attic.nayeonie.com/nix-cache"
     ];
     trusted-public-keys = [
       "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
-      "nix-cache:grGRsHhqNDhkEuTODvHJXYmoCClntC+U8XAJQzwMaZM="
+      #"nix-cache:grGRsHhqNDhkEuTODvHJXYmoCClntC+U8XAJQzwMaZM="
     ];
     trusted-users = [ "root" ];
     allow-import-from-derivation = true;

systems/artemision/private-wifi.nix

@@ -0,0 +1,19 @@
+{ ... }:
+{
+  networking.nameservers = [
+    "9.9.9.9"
+    "1.1.1.1"
+    "192.168.76.1"
+  ];
+
+  services.resolved = {
+    enable = true;
+    dnssec = "false";
+    domains = [ "~." ];
+    fallbackDns = [
+      "1.1.1.1#one.one.one.one"
+      "1.0.0.1#one.one.one.one"
+    ];
+    dnsovertls = "true";
+  };
+}

systems/artemision/wifi.nix

@@ -1,9 +1,13 @@
-{ config, ... }:
+{ config, lib, ... }:
 let
   always = 100;
   home = 99;
+  public_wifi = false;
 in
 {
+  imports = lib.optionals (!public_wifi) [
+    ./private-wifi.nix
+  ];
   networking.wireless = {
     enable = true;
     secretsFile = config.sops.secrets."wifi-env".path;
@@ -24,29 +28,13 @@ in
       "24HuFios".pskRaw = "ext:PASS_longboat_home";
       "Verizon_ZLHQ3H".pskRaw = "ext:PASS_angie";
       "Fios-Qn3RB".pskRaw = "ext:PASS_parkridge";
-      "optimumwifi" = { };
-      "CableWiFi" = { };
+      #"optimumwifi" = { };
+      #"CableWiFi" = { };
       "JPMCVisitor" = { };
+      #"Hilton Honors" = { };
     };
   };
 
-  networking.nameservers = [
-    "9.9.9.9"
-    "1.1.1.1"
-    "192.168.76.1"
-  ];
-
-  services.resolved = {
-    enable = true;
-    dnssec = "true";
-    domains = [ "~." ];
-    fallbackDns = [
-      "1.1.1.1#one.one.one.one"
-      "1.0.0.1#one.one.one.one"
-    ];
-    dnsovertls = "true";
-  };
-
   sops = {
     defaultSopsFile = ./secrets.yaml;
     secrets = {

systems/palatine-hill/attic/default.nix

@@ -10,6 +10,10 @@
     attic-client
   ];
 
+  systemd.services.atticd.environment = {
+    RUST_LOG = "INFO";
+  };
+
   services = {
     atticd = {
       enable = true;
@@ -34,6 +38,9 @@
           bucket = "cache-nix-dot";
           endpoint = "https://minio.nayeonie.com";
         };
+        garbage-collection = {
+          interval = "5 minutes";
+        };
 
         # Warning: If you change any of the values here, it will be
         # difficult to reuse existing chunks for newly-uploaded NARs

users/alice/home/git.nix

@@ -3,6 +3,7 @@
 {
   programs.git = {
     enable = true;
+    lfs.enable = true;
     signing = {
       key = "5EFFB75F7C9B74EAA5C4637547940175096C1330";
       signByDefault = true;
@@ -28,6 +29,8 @@
       color.ui = true;
       init.defaultBranch = "main";
       format.signoff = true;
+      pack.windowMemory = "2g";
+      pack.packSizeLimit = "1g";
     };
   };
 }