summaryrefslogtreecommitdiff
path: root/hosts/default.nix
blob: ef269e16ae817c9169811138878515bff0b738a0 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
{
  inputs,
  self,
  ...
}: let
  inherit (import ./profiles.nix {inherit inputs self;}) personal server;

  mkNixOS = {
    name,
    modules ? profile.modules,
    profile ? personal,
    system ? profile.system,
    specialArgs ? profile.specialArgs,
  }:
    profile.builder {
      inherit specialArgs system;
      modules = [./${name}] ++ modules ++ profile.modules;
    };
in {
  flake = {
    nixosConfigurations = {
      glados = mkNixOS {
        name = "glados";
        modules = with inputs; [
          nixos-hardware.nixosModules.common-cpu-amd-pstate
          nixos-hardware.nixosModules.common-gpu-nvidia-nonprime
          nixos-hardware.nixosModules.common-pc-ssd
          lanzaboote.nixosModules.lanzaboote
        ];
      };

      glados-wsl = mkNixOS {
        name = "glados-wsl";
        modules = [inputs.nixos-wsl.nixosModules.wsl];
      };

      atlas = mkNixOS {
        name = "atlas";
        modules = [
          inputs.hercules-ci-agent.nixosModules.agent-service

          {
            getchoo.server = {
              secrets.enable = true;
              services.hercules-ci = {
                enable = true;
                secrets.enable = true;
              };
            };
          }
        ];

        system = "aarch64-linux";
        profile = server;
      };

      p-body = mkNixOS {
        name = "p-body";
        modules = with inputs; [
          hercules-ci-agent.nixosModules.agent-service
          guzzle_api.nixosModules.guzzle_api

          {
            getchoo.server = {
              secrets.enable = true;
              services.hercules-ci = {
                enable = true;
                secrets.enable = true;
              };
            };
          }
        ];

        system = "x86_64-linux";
        profile = server;
      };
    };

    nixosModules.getchoo = import ../modules/nixos;
  };

  perSystem = {
    pkgs,
    system,
    ...
  }: {
    apps = (inputs.nixinate.nixinate.${system} self).nixinate;

    packages = {
      turret = pkgs.callPackage ./turret {inherit (inputs) openwrt-imagebuilder;};
    };
  };
}