use the binary cache on phone

system/devices/radxa-rock5a-server.nix

@@ -37,7 +37,6 @@ in
     "net.ipv4.tcp_congestion_control" = "bbr";
   };
 
-  # as expected, systemd initrd didn't work well, and i really cba to debug it
   networking.useDHCP = false;
   networking.useNetworkd = true;
   systemd.network = {

system/hosts/nixmsi.nix

@@ -149,20 +149,13 @@
     isNormalUser = true;
   };
   nix.settings = {
-    netrc-file = "/secrets/netrc";
     trusted-users = [ "hydra-builder" ];
-    substituters = [
-      "https://binarycache.pavluk.org"
-      "https://cache.nixos.org/"
-    ];
     trusted-substituters = [
       "https://nix-community.cachix.org"
       "https://nix-gaming.cachix.org"
       "https://nixpkgs-wayland.cachix.org"
     ];
     trusted-public-keys = [
-      "binarycache.pavluk.org:Vk0ms/vSqoOV2JXeNVOroc8EfilgVxCCUtpCShGIKsQ="
-      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       "nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4="
       "nixpkgs-wayland.cachix.org-1:3lwxaILxMRkVhehr5StQprHdEo4IrE8sRho9R9HOLYA="

system/modules/common.nix

@@ -205,6 +205,18 @@ in {
     security.rtkit.enable = true;
     services.dbus.enable = true;
     programs.dconf.enable = true;
+
+    nix.settings = {
+      netrc-file = "/secrets/netrc";
+      substituters = [
+        "https://binarycache.pavluk.org"
+        "https://cache.nixos.org/"
+      ];
+      trusted-public-keys = [
+        "binarycache.pavluk.org:Vk0ms/vSqoOV2JXeNVOroc8EfilgVxCCUtpCShGIKsQ="
+        "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+      ];
+    };
   })
 
   ];