tlaternet-server/flake.nix

152 lines
4.4 KiB
Nix
Raw Normal View History

{
description = "tlater.net host configuration";
inputs = {
nixpkgs.url = "github:nixos/nixpkgs/nixos-21.11";
nixos-hardware.url = "github:nixos/nixos-hardware/master";
flake-utils.url = "github:numtide/flake-utils";
2022-01-18 18:59:50 +00:00
sops-nix = {
url = "github:Mic92/sops-nix";
inputs.nixpkgs.follows = "nixpkgs";
};
2021-04-12 01:44:10 +01:00
tlaternet-webserver = {
url = "git+https://gitea.tlater.net/tlaternet/tlaternet.git";
inputs = {
flake-utils.follows = "flake-utils";
nixpkgs.follows = "nixpkgs";
};
};
tlaternet-templates = {
url = "git+https://gitea.tlater.net/tlaternet/tlaternet-templates.git";
inputs = {
flake-utils.follows = "flake-utils";
nixpkgs.follows = "nixpkgs";
};
};
};
2022-01-18 18:59:50 +00:00
outputs = { self, nixpkgs, nixos-hardware, flake-utils, sops-nix
, tlaternet-webserver, tlaternet-templates, ... }@inputs:
2021-04-12 01:44:10 +01:00
let
overlays = [
(final: prev: {
tlaternet-webserver =
tlaternet-webserver.legacyPackages.${prev.system}.packages;
tlaternet-templates =
tlaternet-templates.legacyPackages.${prev.system}.packages;
local = import ./pkgs {
pkgs = prev;
local-lib = self.lib.${prev.system};
};
2021-04-12 01:44:10 +01:00
})
2022-01-18 18:59:50 +00:00
sops-nix.overlay
2021-04-12 01:44:10 +01:00
];
in {
nixosConfigurations = {
tlaternet = let system = "x86_64-linux";
in nixpkgs.lib.nixosSystem {
inherit system;
modules = [
2022-01-18 18:59:50 +00:00
sops-nix.nixosModules.sops
2021-04-18 02:58:49 +01:00
({ modulesPath, ... }: {
imports = [ (modulesPath + "/profiles/headless.nix") ];
nixpkgs.overlays = overlays;
})
2021-04-12 01:40:19 +01:00
(import ./modules)
(import ./configuration)
(import ./configuration/linode.nix)
(import ./configuration/hardware-configuration.nix)
];
};
vm = let system = "x86_64-linux";
in nixpkgs.lib.nixosSystem {
inherit system;
modules = [
2022-01-18 18:59:50 +00:00
sops-nix.nixosModule
2021-04-18 02:58:49 +01:00
({ modulesPath, ... }: {
imports = [ (modulesPath + "/profiles/headless.nix") ];
nixpkgs.overlays = overlays;
})
2021-04-12 01:40:19 +01:00
(import ./modules)
(import ./configuration)
({ lib, ... }: {
users.users.tlater.password = "insecure";
2021-04-25 02:29:01 +01:00
# Disable graphical tty so -curses works
boot.kernelParams = [ "nomodeset" ];
# Sets the base domain for nginx to localhost so that we
# can easily test locally with the VM.
services.nginx.domain = lib.mkOverride 99 "localhost";
2022-01-18 18:59:50 +00:00
# Use a default password for the grafana instance for
# easy testing.
services.grafana.security = {
adminPassword = "insecure";
adminPasswordFile = lib.mkOverride 99 null;
};
2021-04-25 02:29:01 +01:00
# # Set up VM settings to match real VPS
# virtualisation.memorySize = 3941;
# virtualisation.cores = 2;
})
];
};
};
2021-04-22 22:32:54 +01:00
} // flake-utils.lib.eachDefaultSystem (system:
let pkgs = import nixpkgs { inherit system overlays; };
in {
devShell = with pkgs;
mkShell {
2021-07-25 22:21:29 +01:00
buildInputs = [
nixfmt
git-lfs
2022-01-18 18:59:50 +00:00
sops-init-gpg-key
2021-07-25 22:21:29 +01:00
# For the minecraft mod update script
(python3.withPackages (pypkgs:
with pypkgs; [
dateutil
2021-07-25 22:21:29 +01:00
requests
2022-01-18 18:59:30 +00:00
# ipython
# python-language-server
# pyls-black
# pyls-isort
# pyls-mypy
2021-07-25 22:21:29 +01:00
]))
];
2022-01-18 18:59:50 +00:00
# nativeBuildInputs = [ sops-import-keys-hook ]; Breaks the shellHook somehow
sopsPGPKeyDirs = [ "./keys/hosts/" "./keys/users/" ];
2021-04-22 22:32:54 +01:00
shellHook = ''
export QEMU_OPTS="-m 3941 -smp 2 -curses"
export QEMU_NET_OPTS="hostfwd=::3022-:2222,hostfwd=::3080-:80,hostfwd=::3443-:443,hostfwd=::3021-:2221,hostfwd=::25565-:25565"
2021-04-28 00:04:30 +01:00
# Work around sudo requiring a full terminal
export NIX_SSHOPTS="-t"
2021-04-22 22:32:54 +01:00
'';
};
packages = import ./pkgs {
inherit pkgs;
local-lib = self.lib.${system};
};
lib = import ./lib {
inherit pkgs inputs;
lib = nixpkgs.lib;
};
2021-04-22 22:32:54 +01:00
});
}