misc

modules/core/default.nix

@@ -14,11 +14,7 @@
     "steam-unwrapped"
   ];
 
-  nixpkgs.config.permittedInsecurePackages = [
-    "jitsi-meet-1.0.8043"
-    "electron-28.3.3"
-    "electron-27.3.11"
-  ];
+  nixpkgs.config.permittedInsecurePackages = [];
 
   documentation = {
     enable = true;
@@ -37,18 +33,10 @@
     settings = {
       # hardlink duplicate files in the nix store
       auto-optimise-store = true;
+      experimental-features = [ "nix-command" "flakes" "pipe-operators" ];
+      builders-use-substitutes = true;
     };
 
-    extraOptions = ''
-      experimental-features = nix-command flakes
-
-      # keep intermediary deps alive (no redownloading to rebuild after gc)
-      keep-outputs = true
-      keep-derivations = true
-
-      builders-use-substitutes = true
-    '';
-
     # flake registries are used by the new nix commands.
     # this binds the nixpkgs registry to the one in `flake.nix`.
     registry = {
@@ -72,7 +60,7 @@
       speedFactor = 100;
       maxJobs = 16;
       sshUser = "nix-remote-build";
-      sshKey = "/root/.ssh/id_build_server";
+      sshKey = "/root/.ssh/id_ed25519";
     } ];
   };