forked from lix-project/lix
src/nix/flake.md: Itemize safe nixConfigs
This commit is contained in:
parent
bfc558c972
commit
5cd9890e8a
|
@ -381,10 +381,12 @@ The following attributes are supported in `flake.nix`:
|
||||||
|
|
||||||
* `nixConfig`: a set of `nix.conf` options to be set when evaluating any
|
* `nixConfig`: a set of `nix.conf` options to be set when evaluating any
|
||||||
part of a flake. In the interests of security, only a small set of
|
part of a flake. In the interests of security, only a small set of
|
||||||
whitelisted options (currently `bash-prompt`, `bash-prompt-prefix`,
|
set of options is allowed to be set without confirmation so long as [`accept-flake-config`](@docroot@/command-ref/conf-file.md#conf-accept-flake-config) is not enabled in the global configuration:
|
||||||
`bash-prompt-suffix`, `flake-registry`, and `commit-lockfile-summary`)
|
- [`bash-prompt`](@docroot@/command-ref/conf-file.md#conf-bash-prompt)
|
||||||
are allowed to be set without confirmation so long as `accept-flake-config`
|
- [`bash-prompt-prefix`](@docroot@/command-ref/conf-file.md#conf-bash-prompt-prefix)
|
||||||
is not set in the global configuration.
|
- [`bash-prompt-suffix`](@docroot@/command-ref/conf-file.md#conf-bash-prompt-suffix)
|
||||||
|
- [`flake-registry`](@docroot@/command-ref/conf-file.md#conf-flake-registry)
|
||||||
|
- [`commit-lockfile-summary`](@docroot@/command-ref/conf-file.md#conf-commit-lockfile-summary)
|
||||||
|
|
||||||
## Flake inputs
|
## Flake inputs
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue