103 lines
2.8 KiB
Nix
103 lines
2.8 KiB
Nix
{
|
|
description = "Fudo Host Configuration";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "nixpkgs/nixos-21.05";
|
|
|
|
fudo-home.url = "path:/state/nixops/fudo-home";
|
|
|
|
fudo-pkgs.url = "path:/state/nixops/fudo-pkgs";
|
|
|
|
fudo-secrets.url = "path:/state/secrets";
|
|
};
|
|
|
|
outputs = { self, nixpkgs, fudo-home, fudo-pkgs, fudo-secrets, ... }:
|
|
with nixpkgs.lib;
|
|
let
|
|
sys-lib = import ./lib/system.nix { lib = nixpkgs.lib; };
|
|
|
|
fudo-nix-hosts = nixpkgs.lib.filterAttrs
|
|
(hostname: hostOpts: hostOpts.nixos-system)
|
|
(sys-lib.hosts ./config/hosts);
|
|
|
|
fudo-networks = sys-lib.networks ./config/networks;
|
|
in {
|
|
fudoHosts = fudo-nix-hosts;
|
|
|
|
fudoNetworks = fudo-networks;
|
|
|
|
nixosModule = {
|
|
imports = [
|
|
./lib
|
|
];
|
|
};
|
|
|
|
nixosConfigurations = let
|
|
|
|
build-timestamp = self.sourceInfo.lastModified;
|
|
|
|
pkgs-for = arch: import nixpkgs {
|
|
system = arch;
|
|
config = {
|
|
allowUnfree = true;
|
|
permittedInsecurePackages = [
|
|
"openssh-with-gssapi-8.4p1"
|
|
];
|
|
};
|
|
overlays = [
|
|
fudo-pkgs.overlay
|
|
(import ./lib/overlay.nix)
|
|
];
|
|
};
|
|
in mapAttrs (hostname: hostOpts: let
|
|
system = hostOpts.arch;
|
|
site = hostOpts.site;
|
|
domain = hostOpts.domain;
|
|
profile = hostOpts.profile;
|
|
in nixosSystem {
|
|
inherit system;
|
|
|
|
modules = let
|
|
config-path = ./config;
|
|
in [
|
|
fudo-home.nixosModule
|
|
fudo-secrets.nixosModule
|
|
|
|
({ config, ... }: let
|
|
network-hosts = config.fudo.networks.${domain}.hosts;
|
|
host-filesystem-keys =
|
|
config.fudo.secrets.files.host-filesystem-keys;
|
|
in {
|
|
imports = [
|
|
./lib
|
|
./config
|
|
(config-path + /hardware/${hostname}.nix)
|
|
(config-path + /host-config/${hostname}.nix)
|
|
(config-path + /profile-config/${profile}.nix)
|
|
(config-path + /domain-config/${domain}.nix)
|
|
(config-path + /site-config/${site}.nix)
|
|
];
|
|
instance = {
|
|
inherit hostname build-timestamp;
|
|
build-seed = builtins.readFile
|
|
config.fudo.secrets.files.build-seed;
|
|
};
|
|
nixpkgs.pkgs = pkgs-for system;
|
|
# deployment = {
|
|
# targetHost =
|
|
# network-hosts.${hostname}.ipv4-address;
|
|
|
|
# keys = if (hasAttr hostname host-filesystem-keys) then
|
|
# mapAttrs (secret: secret-file: {
|
|
# keyFile = secret-file;
|
|
# user = "root";
|
|
# permissions = "0400";
|
|
# }) host-filesystem-keys.${hostname}
|
|
# else {};
|
|
# };
|
|
})
|
|
];
|
|
}) fudo-nix-hosts;
|
|
};
|
|
}
|