huge

modules/shared/nixos/nix/common.nix

@@ -1,7 +1,7 @@
 {
   pkgs,
   # inputs,
-  config,
+  # config,
   lib,
   ...
 }: {
@@ -15,33 +15,35 @@
       automatic = true;
       dates = ["weekly"];
     };
-    settings = {
-      auto-optimise-store = true;
-      experimental-features = [
-        "nix-command"
-        "flakes"
-        # for container in builds support
-        "auto-allocate-uids"
-        "cgroups"
-
-        # Enable the use of the fetchClosure built-in function in the Nix language.
-        # "fetch-closure"
-
-        # Allow derivation builders to call Nix, and thus build derivations recursively.
-        # "recursive-nix"
-
-        # Allow the use of the impure-env setting.
-        # "configurable-impure-env"
-      ];
-      use-xdg-base-directories = true;
-    };
   };
-  # no longer need to pre-allocate build users for everything
-  nix.settings.auto-allocate-uids = lib.mkDefault true;
-  # Needs a patch in Nix to work properly: https://github.com/NixOS/nix/pull/13135
-  nix.settings.use-cgroups = true;
+  nix.settings = {
+    auto-optimise-store = true;
+    experimental-features = [
+      "nix-command"
+      "flakes"
 
-  # for container in builds support
-  nix.settings.system-features = ["uid-range"];
-  systemd.services.nix-daemon.serviceConfig.RestrictNamespaces = lib.mkForce []; # (lib.remove "~cgroup" config.systemd.services.nix-daemon.serviceConfig.RestrictNamespaces);
+      # for container in builds support
+      "auto-allocate-uids"
+      "cgroups"
+
+      # Enable the use of the fetchClosure built-in function in the Nix language.
+      # "fetch-closure"
+
+      # Allow derivation builders to call Nix, and thus build derivations recursively.
+      # "recursive-nix"
+
+      # Allow the use of the impure-env setting.
+      # "configurable-impure-env"
+    ];
+    # no longer need to pre-allocate build users for everything
+    auto-allocate-uids = lib.mkDefault true;
+
+    # Needs a patch in Nix to work properly: https://github.com/NixOS/nix/pull/13135
+    use-cgroups = true;
+
+    # for container in builds support
+    system-features = ["uid-range"];
+
+    use-xdg-base-directories = true;
+  };
 }