Skyler Grey
919b3c4e73
Agenix-rekey is a project which uses rage to encrypt secrets for hosts where they're needed. We'll need it for a future commit with buildbot
76 lines
1.7 KiB
Nix
76 lines
1.7 KiB
Nix
# SPDX-FileCopyrightText: 2024 Auxolotl Infrastructure Contributors
|
|
#
|
|
# SPDX-License-Identifier: GPL-3.0-only
|
|
|
|
{
|
|
description = "Auxolotl infrastructure.";
|
|
|
|
inputs = {
|
|
nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
|
|
unstable.url = "github:nixos/nixpkgs/nixos-unstable";
|
|
|
|
snowfall-lib = {
|
|
url = "github:snowfallorg/lib/dev";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
agenix.url = "github:ryantm/agenix";
|
|
|
|
agenix-rekey = {
|
|
url = "github:oddlama/agenix-rekey";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
auxolotl-website = {
|
|
url = "git+https://git.auxolotl.org/auxolotl/website";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
|
|
deploy-rs = {
|
|
url = "github:serokell/deploy-rs";
|
|
inputs.nixpkgs.follows = "nixpkgs";
|
|
};
|
|
};
|
|
|
|
outputs = inputs: let
|
|
lib = inputs.snowfall-lib.mkLib {
|
|
inherit inputs;
|
|
|
|
src = ./.;
|
|
|
|
snowfall = {
|
|
namespace = "auxolotl";
|
|
};
|
|
};
|
|
in
|
|
lib.mkFlake {
|
|
overlays = [
|
|
inputs.auxolotl-website.overlays.default
|
|
inputs.agenix-rekey.overlays.default
|
|
];
|
|
|
|
systems.modules.nixos = [
|
|
inputs.agenix.nixosModules.default
|
|
inputs.agenix-rekey.nixosModules.default
|
|
];
|
|
|
|
deploy = lib.mkDeploy {
|
|
inherit (inputs) self;
|
|
overrides = {
|
|
axol.hostname = "137.184.177.239";
|
|
baxter.hostname = "209.38.149.197";
|
|
};
|
|
};
|
|
|
|
agenix-rekey = inputs.agenix-rekey.configure {
|
|
userFlake = inputs.self;
|
|
nodes = inputs.self.nixosConfigurations;
|
|
};
|
|
|
|
checks =
|
|
builtins.mapAttrs
|
|
(system: deploy-lib: deploy-lib.deployChecks inputs.self.deploy)
|
|
inputs.deploy-rs.lib;
|
|
};
|
|
}
|