plumjam/nixos - Change OEP3T4IQBN27GB3UR4LQHJRGGCCDDZDS6CFRZSDNL5KCYZPO3BTAC

object-storage: Fix permissions, automate, and limit path sizes.

Created by PlumJam on January 13, 2026

OEP3T4IQBN27GB3UR4LQHJRGGCCDDZDS6CFRZSDNL5KCYZPO3BTAC

Dependencies

[2] ADJBSSJQYK6JNUKKP4AOQWLBIXR2DUMBRWTGXJKZASF6M2BSFYCQC

In channels

main

Change contents

Replacement in modules/object-storage.nix at line 10 [2.6966]
B:BD[2.7076] → [2.7076:7110]
```
      inherit (lib.modules) mkIf;
```
[2.7076]
[2.7110]
```
      inherit (lib.modules) mkIf mkBefore;
```

Replacement in modules/object-storage.nix at line 18 [2.6966]

B:BD[2.7299] → [2.7299:7355]

      s3Cache = "s3://${bucket}?endpoint=${endpoint}";

[2.7299]

[2.7355]

      s3Args = "&priority=10&multipart-upload=true&multipart-threshold=50M&multipart-chunk-size=10M";
      s3Cache = "s3://${bucket}?endpoint=${endpoint}${s3Args}";

Replacement in modules/object-storage.nix at line 25 [2.6966]
B:BD[2.7493] → [2.7493:7522]
```
        mkdir -p "$HOME/.mc"
```
[2.7493]
[2.7522]
```
        mkdir -p "/home/jam/.mc"
```

Replacement in modules/object-storage.nix at line 28 [2.6966]

B:BD[2.7615] → [2.7615:7723]

          "$(sudo cat ${secrets.s3AccessKey.path})" \
          "$(sudo cat ${secrets.s3SecretKey.path})" \

[2.7615]

[2.7723]

          "$(cat ${secrets.s3AccessKey.path})" \
          "$(cat ${secrets.s3SecretKey.path})" \

Replacement in modules/object-storage.nix at line 34 [2.6966]

B:BD[2.7814] → [2.7814:8020]

        sudo mkdir -p /etc/nix
        accessKey=$(sudo cat ${secrets.s3AccessKey.path})
        secretKey=$(sudo cat ${secrets.s3SecretKey.path})
        sudo tee /etc/nix/s3-credentials > /dev/null <<EOF

[2.7814]

[2.8020]

        mkdir -p /etc/nix
        accessKey=$(cat ${secrets.s3AccessKey.path})
        secretKey=$(cat ${secrets.s3SecretKey.path})
        tee /etc/nix/s3-credentials > /dev/null <<EOF

Replacement in modules/object-storage.nix at line 41 [2.6966]

B:BD[2.8110] → [2.8110:8157]

        sudo chmod 600 /etc/nix/s3-credentials

[2.8110]

[2.8157]

        chmod 600 /etc/nix/s3-credentials
        # AWS credentials file for AWS SDK credential chain.
        mkdir -p /root/.aws
        tee /root/.aws/credentials > /dev/null <<EOF
        [default]
        aws_access_key_id=$accessKey
        aws_secret_access_key=$secretKey
        EOF
        chmod 600 /root/.aws/credentials

Replacement in modules/object-storage.nix at line 56 [2.6966]

B:BD[2.8288] → [2.8288:8360]

              sudo tee /etc/nix/post-build-hook.sh > /dev/null <<'HOOK'

[2.8288]

[2.8360]

              tee /etc/nix/post-build-hook.sh > /dev/null <<'HOOK'

Insertion in modules/object-storage.nix at line 62 [2.6966]

[2.8606]


              # Minimum size to upload (512 KiB)
              MIN_SIZE=524288

Replacement in modules/object-storage.nix at line 70 [2.6966]

B:BD[2.8845] → [2.8845:8880]

              # Upload to S3 cache

[2.8845]

[2.8880]


              # Upload to S3 cache (only paths larger than MIN_SIZE)

Replacement in modules/object-storage.nix at line 73 [2.6966]

B:BD[2.8923] → [2.8923:9003]

                /run/current-system/sw/bin/nix copy --to "${s3Cache}" "$output"

[2.8923]

[2.9003]

                # Get the size of the store path using du
                size=$(du -sb "$output" 2>/dev/null | awk '{print $1}' || echo "0")
                # Only upload if larger than minimum size
                if [ "$size" -ge "$MIN_SIZE" ]; then
                  /run/current-system/sw/bin/nix copy --to "${s3Cache}" "$output"
                fi

Replacement in modules/object-storage.nix at line 82 [2.6966]

B:BD[2.9041] → [2.9041:9097]

              sudo chmod +x /etc/nix/post-build-hook.sh

[2.9041]

[2.9097]

              chmod +x /etc/nix/post-build-hook.sh

Insertion in modules/object-storage.nix at line 102 [2.6966]

[2.9640]

      system.activationScripts.s3-setup = {
        deps = [ "agenix" ];
        text = ''
          echo "Setting up S3 credentials..."
          ${getExe setupScript}
        '';
      };

Replacement in modules/object-storage.nix at line 111 [2.6966]

B:BD[2.9663] → [2.9663:9705]

        extra-substituters = [ s3Cache ];

[2.9663]

[2.9705]

        extra-substituters = mkBefore [ s3Cache ];