From dd0a89d5cddb341161acaba1120feb6baf4f23ac Mon Sep 17 00:00:00 2001
From: Zuckerberg <zuckerberg@neet.dev>
Date: Fri, 20 Feb 2026 21:03:58 -0800
Subject: [PATCH] trim

---
 .gitea/workflows/check-flake.yaml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/check-flake.yaml b/.gitea/workflows/check-flake.yaml
index 7815be0..6e347c5 100644
--- a/.gitea/workflows/check-flake.yaml
+++ b/.gitea/workflows/check-flake.yaml
@@ -33,10 +33,14 @@ jobs:
           # Get all system toplevel store paths
           toplevels=$(nix eval .#nixosConfigurations --apply 'cs: map (n: "${cs.${n}.config.system.build.toplevel}") (builtins.attrNames cs)' --json | jq -r '.[]')
           echo "Found $(echo "$toplevels" | wc -l) system toplevels"
-          # Expand to full closures, deduplicate, and filter out paths already
-          # signed by cache.nixos.org — only our custom builds need caching
+          # Expand to full closures, deduplicate, and filter out paths that are:
+          # - already signed by cache.nixos.org (available upstream)
+          # - smaller than 0.5MB (insignificant build artifacts)
           paths=$(echo "$toplevels" \
             | xargs nix path-info -r --json \
-            | jq -r '[to_entries[] | select(.value.signatures | all(startswith("cache.nixos.org") | not)) | .key] | unique[]')
+            | jq -r '[to_entries[] | select(
+                (.value.signatures | all(startswith("cache.nixos.org") | not))
+                and .value.narSize >= 524288
+              ) | .key] | unique[]')
           echo "Pushing $(echo "$paths" | wc -l) unique paths to cache"
           echo "$paths" | xargs attic push local:nixos