jade
c1f9e26c06
Let's be real, I am doing this because I got impatient with the gratuitous copy to the store this eliminates caused by pkgs.path. Also gets rid of stuff in nix.extraOptions which is deprecated.
122 lines
2.7 KiB
Nix
122 lines
2.7 KiB
Nix
{ self, ... }:
|
||
let
|
||
inherit
|
||
(self.inputs)
|
||
nixpkgs
|
||
lix-module
|
||
home-manager
|
||
agenix
|
||
nur
|
||
colmena
|
||
flake-registry
|
||
nixos-hardware
|
||
srvos
|
||
disko
|
||
;
|
||
nixosSystem = nixpkgs.lib.makeOverridable nixpkgs.lib.nixosSystem;
|
||
|
||
colmenaModules = [
|
||
colmena.nixosModules.deploymentOptions
|
||
];
|
||
|
||
commonModules = [
|
||
{
|
||
_module.args.self = self;
|
||
_module.args.inputs = self.inputs;
|
||
srvos.flake = self;
|
||
}
|
||
# only include admins here for monitoring/backup infrastructure
|
||
./modules/users/admins.nix
|
||
./modules/packages.nix
|
||
./modules/nix-daemon.nix
|
||
./modules/tor-ssh.nix
|
||
./modules/hosts.nix
|
||
./modules/network.nix
|
||
./modules/zsh.nix
|
||
# FIXME: ./modules/buildbot — whenever you are ready.
|
||
|
||
|
||
disko.nixosModules.disko
|
||
srvos.nixosModules.server
|
||
|
||
srvos.nixosModules.mixins-trusted-nix-caches
|
||
srvos.nixosModules.mixins-terminfo
|
||
|
||
# srvos.nixosModules.mixins-telegraf
|
||
# srvos.nixosModules.mixins-terminfo
|
||
|
||
# use lix
|
||
lix-module.nixosModules.default
|
||
|
||
agenix.nixosModules.default
|
||
({ pkgs
|
||
, config
|
||
, lib
|
||
, ...
|
||
}:
|
||
let
|
||
sopsFile = ./. + "/hosts/${config.networking.hostName}.yml";
|
||
in
|
||
{
|
||
nix.nixPath = [
|
||
"home-manager=${home-manager}"
|
||
"nixpkgs=flake:nixpkgs"
|
||
"nur=${nur}"
|
||
];
|
||
# TODO: share nixpkgs for each machine to speed up local evaluation.
|
||
#nixpkgs.pkgs = self.inputs.nixpkgs.legacyPackages.${system};
|
||
|
||
#users.withSops = builtins.pathExists sopsFile;
|
||
#sops.secrets = lib.mkIf (config.users.withSops) {
|
||
# root-password-hash.neededForUsers = true;
|
||
#};
|
||
# sops.defaultSopsFile = lib.mkIf (builtins.pathExists sopsFile) sopsFile;
|
||
|
||
nix.settings.builders-use-substitutes = true;
|
||
|
||
nix.registry = {
|
||
home-manager.flake = home-manager;
|
||
nixpkgs.flake = nixpkgs;
|
||
nur.flake = nur;
|
||
};
|
||
time.timeZone = "UTC";
|
||
|
||
environment.systemPackages = [
|
||
pkgs.kitty.terminfo
|
||
];
|
||
})
|
||
];
|
||
in
|
||
{
|
||
flake.nixosConfigurations = {
|
||
epyc = nixosSystem {
|
||
system = "x86_64-linux";
|
||
modules =
|
||
commonModules
|
||
++ colmenaModules
|
||
++ [
|
||
./hosts/epyc.nix
|
||
];
|
||
};
|
||
};
|
||
|
||
flake.colmena = {
|
||
meta.nixpkgs = import nixpkgs {
|
||
system = "x86_64-linux";
|
||
# yikes, this overlay has to be listed twice since colmena makes us
|
||
# import nixpkgs explicitly here
|
||
overlays = [
|
||
# bonking cppnix out of the closure as much as possible
|
||
lix-module.overlays.default
|
||
];
|
||
};
|
||
epyc = {
|
||
imports =
|
||
commonModules
|
||
++ [
|
||
./hosts/epyc.nix
|
||
];
|
||
};
|
||
};
|
||
}
|