dotfiles/modules/nixos/core/nix/default.nix

{
  flake,
  config,
  lib,
  ...
}:
let
  inherit (flake.config.people) user0;
in
{
  nixpkgs = {
    config = {
      allowUnfree = true;
      allowBroken = true;
      permittedInsecurePackages = [
      ];
    };
  };
  nix = {
    extraOptions = ''
      experimental-features = nix-command flakes
      keep-outputs = true
      keep-derivations = true
    '';
    settings = {
      substituters = [
      ];
      trusted-public-keys = [
      ];
      trusted-users = [
        "root"
        user0
      ];
    };
  };
  environment.etc."current-system-packages".text =
    let
      packages = builtins.map (p: "${p.name}") config.environment.systemPackages;
      sortedUnique = builtins.sort builtins.lessThan (lib.unique packages);
      formatted = builtins.concatStringsSep "\n" sortedUnique;
    in
    formatted;
}