From 82f84cf435dd5cbaf7f650996f97fd9205ed50d3 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Mon, 26 Oct 2026 17:33:37 +0100
Subject: create nix cache key and autosign paths on nyaan

---
 hosts/nyaan/default.nix | 5 +++++
 share/system/common.nix | 3 +++
 2 files changed, 8 insertions(+)

diff --git a/hosts/nyaan/default.nix b/hosts/nyaan/default.nix
index 31d7458..0ebab5f 100644
--- a/hosts/nyaan/default.nix
+++ b/hosts/nyaan/default.nix
@@ -19,6 +19,11 @@
     }
   ];
 
+  # automatically sign store paths
+  nix.settings.secret-key-files = [
+    "/var/lib/secrets/nix-cache-priv-key"
+  ];
+
   programs.fish.enable = true;
   users.defaultUserShell = pkgs.fish;
 
diff --git a/share/system/common.nix b/share/system/common.nix
index 6e843c3..dbd3f8f 100644
--- a/share/system/common.nix
+++ b/share/system/common.nix
@@ -9,6 +9,9 @@
         "flakes"
       ];
       auto-optimise-store = true;
+      trusted-public-keys = [
+        "nix-cache.sorre.xyz:nEDyGXFMCNc1CuxcwbCbfoyGUumoYT6opiUeIGVrp5o="
+      ];
     };
     registry = {
       "templates" = {
-- 
cgit v1.3.1