diff options
| author | Robert Hensing <robert@roberthensing.nl> | 2023-04-18 16:06:58 +0200 |
|---|---|---|
| committer | Robert Hensing <robert@roberthensing.nl> | 2023-04-18 16:06:58 +0200 |
| commit | 5cd9890e8a96e2f2ab205738c1e2e4a6b615f443 (patch) | |
| tree | 4e4e75f53064e8431ea0dea3117064e31b868028 /src/nix/flake.md | |
| parent | bfc558c972aa8d6f5ef15a3e720bed964925ae32 (diff) | |
src/nix/flake.md: Itemize safe nixConfigs
Diffstat (limited to 'src/nix/flake.md')
| -rw-r--r-- | src/nix/flake.md | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/src/nix/flake.md b/src/nix/flake.md index 965f6eb48..456fd0ea1 100644 --- a/src/nix/flake.md +++ b/src/nix/flake.md @@ -381,10 +381,12 @@ The following attributes are supported in `flake.nix`: * `nixConfig`: a set of `nix.conf` options to be set when evaluating any part of a flake. In the interests of security, only a small set of - whitelisted options (currently `bash-prompt`, `bash-prompt-prefix`, - `bash-prompt-suffix`, `flake-registry`, and `commit-lockfile-summary`) - are allowed to be set without confirmation so long as `accept-flake-config` - is not set in the global configuration. + set of options is allowed to be set without confirmation so long as [`accept-flake-config`](@docroot@/command-ref/conf-file.md#conf-accept-flake-config) is not enabled in the global configuration: + - [`bash-prompt`](@docroot@/command-ref/conf-file.md#conf-bash-prompt) + - [`bash-prompt-prefix`](@docroot@/command-ref/conf-file.md#conf-bash-prompt-prefix) + - [`bash-prompt-suffix`](@docroot@/command-ref/conf-file.md#conf-bash-prompt-suffix) + - [`flake-registry`](@docroot@/command-ref/conf-file.md#conf-flake-registry) + - [`commit-lockfile-summary`](@docroot@/command-ref/conf-file.md#conf-commit-lockfile-summary) ## Flake inputs |