From 21f822e5aa94275eadd4ebe4a1f576ecba9e08cc Mon Sep 17 00:00:00 2001
From: chn <chn@chn.moe>
Date: Sat, 22 Jun 2024 16:04:24 +0800
Subject: [PATCH 1/2] system.nix: enable ca-derivations

---
 modules/system/nix.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/system/nix.nix b/modules/system/nix.nix
index 9495e188..65faf342 100644
--- a/modules/system/nix.nix
+++ b/modules/system/nix.nix
@@ -33,7 +33,7 @@ inputs:
       nix.settings =
       {
         system-features = [ "big-parallel" "nixos-test" "benchmark" ];
-        experimental-features = [ "nix-command" "flakes" ];
+        experimental-features = [ "nix-command" "flakes" "ca-derivations" ];
         keep-failed = true;
         max-substitution-jobs = 4;
         trusted-public-keys = [ "chn:Cc+nowW1LIpe1kyXOZmNaznFDiH1glXmpb4A+WD/DTE=" ];

From 428d12b7b95a6222ac19438fb226aa110eba81b8 Mon Sep 17 00:00:00 2001
From: chn <chn@chn.moe>
Date: Sun, 23 Jun 2024 19:23:59 +0800
Subject: [PATCH 2/2] system: enable kubo

---
 modules/system/default.nix   | 8 +++++++-
 modules/user/chn/default.nix | 2 +-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/modules/system/default.nix b/modules/system/default.nix
index 10715484..8e9d254b 100644
--- a/modules/system/default.nix
+++ b/modules/system/default.nix
@@ -3,7 +3,13 @@ inputs:
   imports = inputs.localLib.findModules ./.;
   config =
   {
-    services = { dbus.implementation = "broker"; fstrim.enable = true; acpid.enable = true; };
+    services =
+    {
+      dbus.implementation = "broker";
+      fstrim.enable = true;
+      acpid.enable = true;
+      kubo = { enable = true; autoMount = true; };
+    };
     time.timeZone = "Asia/Shanghai";
     boot =
     {
diff --git a/modules/user/chn/default.nix b/modules/user/chn/default.nix
index 0a84c5a3..92fa4953 100644
--- a/modules/user/chn/default.nix
+++ b/modules/user/chn/default.nix
@@ -6,7 +6,7 @@ inputs:
     users.users.chn =
     {
       extraGroups = inputs.lib.intersectLists
-        [ "adbusers" "networkmanager" "wheel" "wireshark" "libvirtd" ]
+        [ "adbusers" "networkmanager" "wheel" "wireshark" "libvirtd" "ipfs" ]
         (builtins.attrNames inputs.config.users.groups);
       autoSubUidGidRange = true;
       hashedPassword = "$y$j9T$xJwVBoGENJEDSesJ0LfkU1$VEExaw7UZtFyB4VY1yirJvl7qS7oiF49KbEBrV0.hhC";