792 lines
18 KiB
Nix
792 lines
18 KiB
Nix
{
|
|
description = "hand7s'es flake";
|
|
|
|
inputs = {
|
|
agenix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "yaxitech";
|
|
repo = "ragenix";
|
|
};
|
|
|
|
agenix-rekey = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "oddlama";
|
|
repo = "agenix-rekey";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
ayugram-desktop = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "ndfined-crp";
|
|
repo = "ayugram-desktop";
|
|
};
|
|
|
|
chaotic = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "chaotic-cx";
|
|
repo = "nyx";
|
|
ref = "nyxpkgs-unstable";
|
|
};
|
|
|
|
deploy-rs = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "serokell";
|
|
repo = "deploy-rs";
|
|
};
|
|
|
|
devenv = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "cachix";
|
|
repo = "devenv";
|
|
};
|
|
|
|
devshell = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "numtide";
|
|
repo = "devshell";
|
|
};
|
|
|
|
disko = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "disko";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
flake-parts = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "hercules-ci";
|
|
repo = "flake-parts";
|
|
};
|
|
|
|
freesm = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "freesmteam";
|
|
repo = "freesmlauncher";
|
|
};
|
|
|
|
github-actions-nix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "synapdeck";
|
|
repo = "github-actions-nix";
|
|
};
|
|
|
|
git-hooks-nix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "cachix";
|
|
repo = "git-hooks.nix";
|
|
};
|
|
|
|
home-manager = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "home-manager";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
homebrew-bundle = {
|
|
flake = false;
|
|
type = "github";
|
|
owner = "homebrew";
|
|
repo = "homebrew-bundle";
|
|
};
|
|
|
|
homebrew-cask = {
|
|
flake = false;
|
|
type = "github";
|
|
owner = "homebrew";
|
|
repo = "homebrew-cask";
|
|
};
|
|
|
|
homebrew-core = {
|
|
flake = false;
|
|
type = "github";
|
|
owner = "homebrew";
|
|
repo = "homebrew-core";
|
|
};
|
|
|
|
hyprland = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "hyprwm";
|
|
repo = "Hyprland";
|
|
};
|
|
|
|
lanzaboote = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "lanzaboote";
|
|
ref = "v0.4.2";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
nekoflake = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "s0me1newithhand7s";
|
|
repo = "nekoflake";
|
|
};
|
|
|
|
nix-bwrapper = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "Naxdy";
|
|
repo = "nix-bwrapper";
|
|
};
|
|
|
|
nix-darwin = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "LnL7";
|
|
repo = "nix-darwin";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
nix-cachyos-kernel = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "xddxdd";
|
|
repo = "nix-cachyos-kernel";
|
|
ref = "release";
|
|
};
|
|
|
|
nix-mineral = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "cynicsketch";
|
|
repo = "nix-mineral";
|
|
};
|
|
|
|
nix-homebrew = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "zhaofengli";
|
|
repo = "nix-homebrew";
|
|
};
|
|
|
|
nix-index-database = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nix-index-database";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
nix-on-droid = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nix-on-droid";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
|
|
home-manager = {
|
|
follows = "home-manager";
|
|
};
|
|
};
|
|
};
|
|
|
|
nixos-anywhere = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nixos-anywhere";
|
|
};
|
|
|
|
nixos-cli = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nixos-cli";
|
|
};
|
|
|
|
nixos-generators = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nixos-generators";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
nixos-wsl = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nixos-wsl";
|
|
ref = "main";
|
|
};
|
|
|
|
nixpkgs = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nixos";
|
|
repo = "nixpkgs";
|
|
ref = "nixos-unstable";
|
|
};
|
|
|
|
noctalia = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "noctalia-dev";
|
|
repo = "noctalia-shell";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
|
|
quickshell = {
|
|
follows = "quickshell";
|
|
};
|
|
};
|
|
};
|
|
|
|
quickshell = {
|
|
flake = true;
|
|
type = "git";
|
|
url = "https://git.outfoxxed.me/quickshell/quickshell";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
sops-nix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "Mic92";
|
|
repo = "sops-nix";
|
|
};
|
|
|
|
spicetify-nix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "Gerg-L";
|
|
repo = "spicetify-nix";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
stylix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "stylix";
|
|
};
|
|
|
|
system-manager = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "numtide";
|
|
repo = "system-manager";
|
|
|
|
inputs = {
|
|
nixpkgs = {
|
|
follows = "nixpkgs";
|
|
};
|
|
};
|
|
};
|
|
|
|
treefmt-nix = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "numtide";
|
|
repo = "treefmt-nix";
|
|
};
|
|
|
|
vscserver = {
|
|
flake = true;
|
|
type = "github";
|
|
owner = "nix-community";
|
|
repo = "nixos-vscode-server";
|
|
};
|
|
};
|
|
|
|
outputs = inputs @ {self, ...}:
|
|
inputs.flake-parts.lib.mkFlake {
|
|
inherit
|
|
inputs
|
|
self
|
|
;
|
|
} {
|
|
debug = false;
|
|
|
|
systems = [
|
|
"x86_64-linux"
|
|
"aarch64-linux"
|
|
];
|
|
|
|
imports = [
|
|
# modules
|
|
inputs.agenix-rekey.flakeModule
|
|
inputs.disko.flakeModules.default
|
|
inputs.devshell.flakeModule
|
|
inputs.treefmt-nix.flakeModule
|
|
inputs.home-manager.flakeModules.home-manager
|
|
inputs.git-hooks-nix.flakeModule
|
|
inputs.devenv.flakeModule
|
|
# i can't really deside between devenv, devshells and devShells they are equally good for me
|
|
# for now, at least, i'm using numtide/devshells
|
|
inputs.github-actions-nix.flakeModule
|
|
];
|
|
|
|
flake = {
|
|
# home-manager, sorta broken when standalone
|
|
homeConfigurations = {
|
|
"hand7s" = inputs.home-manager.lib.homeManagerConfiguration {
|
|
pkgs = inputs.nixpkgs.legacyPackages.x86_64-linux;
|
|
extraSpecialArgs = {
|
|
osConfig.networking.hostName = "";
|
|
inherit
|
|
inputs
|
|
self
|
|
;
|
|
};
|
|
|
|
modules = [
|
|
"${self}/hand7s/standalone.nix"
|
|
inputs.spicetify-nix.homeManagerModules.default
|
|
inputs.hyprland.homeManagerModules.default
|
|
inputs.chaotic.homeManagerModules.default
|
|
inputs.sops-nix.homeManagerModules.sops
|
|
|
|
inputs.nix-index-database.homeModules.nix-index
|
|
inputs.noctalia.homeModules.default
|
|
inputs.stylix.homeModules.stylix
|
|
];
|
|
};
|
|
};
|
|
|
|
# nixos hosts
|
|
|
|
# my PC
|
|
nixosConfigurations = {
|
|
"ada" = inputs.nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
specialArgs = {
|
|
inherit
|
|
inputs
|
|
self
|
|
;
|
|
};
|
|
|
|
modules = [
|
|
"${self}/ada/"
|
|
inputs.agenix.nixosModules.default
|
|
inputs.chaotic.nixosModules.default
|
|
inputs.stylix.nixosModules.stylix
|
|
inputs.sops-nix.nixosModules.sops
|
|
inputs.disko.nixosModules.disko
|
|
inputs.lanzaboote.nixosModules.lanzaboote
|
|
inputs.home-manager.nixosModules.default
|
|
inputs.nix-index-database.nixosModules.nix-index
|
|
inputs.nix-bwrapper.nixosModules.default
|
|
inputs.nix-mineral.nixosModules.nix-mineral
|
|
];
|
|
};
|
|
|
|
# my laptop
|
|
"isla" = inputs.nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
specialArgs = {
|
|
inherit
|
|
inputs
|
|
self
|
|
;
|
|
};
|
|
|
|
modules = [
|
|
"${self}/isla/"
|
|
inputs.agenix.nixosModules.default
|
|
inputs.chaotic.nixosModules.default
|
|
inputs.stylix.nixosModules.stylix
|
|
inputs.sops-nix.nixosModules.sops
|
|
inputs.disko.nixosModules.disko
|
|
inputs.home-manager.nixosModules.home-manager
|
|
inputs.lanzaboote.nixosModules.lanzaboote
|
|
inputs.nix-index-database.nixosModules.nix-index
|
|
inputs.nix-bwrapper.nixosModules.default
|
|
inputs.nix-mineral.nixosModules.nix-mineral
|
|
];
|
|
};
|
|
|
|
"s0mev1rtn0de-nix" = inputs.nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
specialArgs = {
|
|
inherit
|
|
inputs
|
|
self
|
|
;
|
|
};
|
|
|
|
modules = [
|
|
"${self}/s0mev1rtn0de-nix/"
|
|
inputs.disko.nixosModules.disko
|
|
inputs.home-manager.nixosModules.default
|
|
inputs.sops-nix.nixosModules.sops
|
|
inputs.nix-index-database.nixosModules.nix-index
|
|
];
|
|
};
|
|
|
|
"s0meMiniPC-nix" = inputs.nixpkgs.lib.nixosSystem {
|
|
system = "x86_64-linux";
|
|
specialArgs = {
|
|
inherit
|
|
inputs
|
|
self
|
|
;
|
|
};
|
|
|
|
modules = [
|
|
"${self}/s0meMiniPC-nix"
|
|
inputs.chaotic.nixosModules.default
|
|
inputs.stylix.nixosModules.stylix
|
|
inputs.sops-nix.nixosModules.sops
|
|
inputs.disko.nixosModules.disko
|
|
inputs.lanzaboote.nixosModules.lanzaboote
|
|
inputs.home-manager.nixosModules.default
|
|
inputs.nix-index-database.nixosModules.nix-index
|
|
];
|
|
};
|
|
};
|
|
|
|
# deploy-rs
|
|
deploy = {
|
|
user = "hand7s";
|
|
interactiveSudo = true;
|
|
autoRollback = true;
|
|
magicRollback = true;
|
|
remoteBuild = false;
|
|
sshOpts = [
|
|
"-p"
|
|
"6969"
|
|
];
|
|
|
|
nodes = {
|
|
"s0mev1rtn0de-nix" = {
|
|
hostname = "100.109.213.170";
|
|
profiles = {
|
|
main = {
|
|
path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.s0mev1rtn0de-nix;
|
|
profilePath = "/nix/var/nix/profiles/system";
|
|
};
|
|
};
|
|
};
|
|
|
|
"s0meMiniPC-nix" = {
|
|
hostname = "100.109.71.194";
|
|
profiles = {
|
|
main = {
|
|
path = inputs.deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.s0mev1rtn0de-nix;
|
|
profilePath = "/nix/var/nix/profiles/system";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
perSystem = {
|
|
config,
|
|
pkgs,
|
|
...
|
|
}: {
|
|
# numtide/treefmt-nix, treefmt integrated into nix
|
|
treefmt = {
|
|
flakeFormatter = true;
|
|
flakeCheck = true;
|
|
|
|
programs = {
|
|
alejandra = {
|
|
enable = true;
|
|
priority = 1;
|
|
includes = [
|
|
"*.nix"
|
|
];
|
|
};
|
|
|
|
statix = {
|
|
enable = true;
|
|
priority = 1;
|
|
includes = [
|
|
"*.nix"
|
|
];
|
|
|
|
disabled-lints = [
|
|
"empty_pattern"
|
|
];
|
|
};
|
|
|
|
deadnix = {
|
|
enable = true;
|
|
priority = 1;
|
|
includes = [
|
|
"*.nix"
|
|
];
|
|
};
|
|
};
|
|
|
|
settings = {
|
|
global = {
|
|
on-unmatched = "warn";
|
|
excludes = [
|
|
"secrets/*"
|
|
".sops.yaml"
|
|
".gitignore"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
# cachix/git-hooks-nix, pre-commit-hooks integrated into nix
|
|
pre-commit = {
|
|
check = {
|
|
enable = true;
|
|
};
|
|
|
|
settings = {
|
|
enable = true;
|
|
package = pkgs.prek;
|
|
gitPackage = pkgs.git;
|
|
|
|
hooks = {
|
|
alejandra = {
|
|
enable = true;
|
|
settings = {
|
|
check = true;
|
|
};
|
|
};
|
|
|
|
deadnix = {
|
|
enable = true;
|
|
settings = {
|
|
edit = false;
|
|
};
|
|
};
|
|
|
|
statix = {
|
|
enable = true;
|
|
settings = {
|
|
config = "${pkgs.writeText ''statix.toml'' ''
|
|
disabled = [
|
|
"empty_pattern"
|
|
]
|
|
''}";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
# numtide/devshells, basically a devShells but better
|
|
devshells = {
|
|
"default" = {
|
|
name = "default";
|
|
|
|
commands = [
|
|
{
|
|
name = "pre";
|
|
category = "[tools]";
|
|
command = "prek run -a";
|
|
help = ''
|
|
pre-commit-hook is a tool to execute linters / formatters before `git commit` to verify that code is meeting standarts of code setted up in projects;
|
|
'';
|
|
}
|
|
|
|
{
|
|
name = "fmt";
|
|
category = "[formatters]";
|
|
command = "nix fmt";
|
|
help = ''
|
|
nix fmt is built-in formatting solution for nix pacakage manager;
|
|
'';
|
|
}
|
|
];
|
|
|
|
devshell = {
|
|
startup = {
|
|
"git-hooks-nix" = {
|
|
text = config.pre-commit.shellHook;
|
|
};
|
|
};
|
|
};
|
|
|
|
packages = with pkgs;
|
|
[
|
|
just
|
|
]
|
|
++ config.pre-commit.settings.enabledPackages;
|
|
};
|
|
};
|
|
|
|
# synapdeck/github-actions-nix, declaretive gha
|
|
githubActions = {
|
|
enable = true;
|
|
|
|
workflows = {
|
|
"flake_update" = {
|
|
name = "flake lock updater";
|
|
on = {
|
|
workflowDispatch = {};
|
|
schedule = [
|
|
{
|
|
cron = "0 0 * * *";
|
|
}
|
|
];
|
|
};
|
|
|
|
jobs = {
|
|
"locking" = {
|
|
name = "flake.lock update";
|
|
runsOn = "ubuntu-latest";
|
|
continueOnError = false;
|
|
permissions = "write-all";
|
|
steps = [
|
|
{
|
|
name = "checkout";
|
|
uses = "actions/checkout@v6";
|
|
}
|
|
|
|
{
|
|
name = "nix install";
|
|
uses = "DeterminateSystems/nix-installer-action@v21";
|
|
}
|
|
|
|
{
|
|
name = "flake.lock check";
|
|
uses = "DeterminateSystems/flake-checker-action@v12";
|
|
with_ = {
|
|
fail-mode = true;
|
|
};
|
|
}
|
|
|
|
{
|
|
name = "flake.lock update";
|
|
uses = "DeterminateSystems/update-flake-lock@v28";
|
|
with_ = {
|
|
pr-title = "Update `flake.lock` GitHub Action";
|
|
pr-assignees = "s0me1newithhand7s";
|
|
pr-reviewers = "s0me1newithhand7s";
|
|
pr-lables = ''
|
|
"CI/CD"
|
|
'';
|
|
};
|
|
}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
"fmt_run" = {
|
|
name = "flake_format";
|
|
on = {
|
|
workflowDispatch = {};
|
|
push = {};
|
|
|
|
workflowDispatch = {
|
|
types = [
|
|
"opened"
|
|
"edited"
|
|
"synchronize"
|
|
"reopened"
|
|
];
|
|
};
|
|
};
|
|
|
|
jobs = {
|
|
"fmt" = {
|
|
runsOn = "ubuntu-latest";
|
|
continueOnError = false;
|
|
permissions = "write-all";
|
|
steps = [
|
|
{
|
|
name = "checkout";
|
|
uses = "actions/checkout@v6";
|
|
}
|
|
|
|
{
|
|
name = "nix install";
|
|
uses = "DeterminateSystems/nix-installer-action@v21";
|
|
}
|
|
|
|
{
|
|
name = "flake.lock check";
|
|
uses = "DeterminateSystems/flake-checker-action@v12";
|
|
with_ = {
|
|
fail-mode = true;
|
|
};
|
|
}
|
|
|
|
{
|
|
name = "formatter run";
|
|
run = ''
|
|
nix develop -c prek run -a
|
|
'';
|
|
}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|