infrastructure/flake.nix

190 lines
5.5 KiB
Nix

{
description = "Laureηt's infrastructure";
# TODO: rekey les secrets + changer la key de hydrogen
# TODO: luks encrypt hydrogen (dropbear ?)
# TODO: dégager btfrs de neodymium, ext4 ftw
# TODO: setup disko sur neodymium
inputs = {
# core stuff
nixpkgs = {
url = "github:NixOS/nixpkgs/nixos-unstable";
# url = "git+file:///home/laurent/Documents/nixpkgs?shallow=1";
};
home-manager = {
url = "github:nix-community/home-manager";
inputs.nixpkgs.follows = "nixpkgs";
};
systems = {
url = "github:nix-systems/default-linux";
};
# modules
flake-parts = {
url = "github:hercules-ci/flake-parts";
inputs.nixpkgs-lib.follows = "nixpkgs";
};
agenix = {
# TODO: replace by classic agenix
url = "github:yaxitech/ragenix";
inputs.nixpkgs.follows = "nixpkgs";
};
disko = {
url = "github:nix-community/disko";
inputs.nixpkgs.follows = "nixpkgs";
};
nixos-anywhere = {
url = "github:nix-community/nixos-anywhere";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
};
treefmt-nix = {
url = "github:numtide/treefmt-nix";
inputs.nixpkgs.follows = "nixpkgs";
};
lanzaboote = {
url = "github:nix-community/lanzaboote";
# inputs.nixpkgs.follows = "nixpkgs"; # leads to recompilations
};
hyprland = {
url = "github:hyprwm/Hyprland";
# inputs.nixpkgs.follows = "nixpkgs"; # leads to recompilations
};
nixos-hardware = {
url = "github:nixos/nixos-hardware";
};
# home assets
wallpaper = {
url = "https://images.unsplash.com/photo-1482686115713-0fbcaced6e28";
flake = false;
};
catppuccin-alacritty = {
url = "github:catppuccin/alacritty/yaml";
flake = false;
};
catppuccin-bat = {
url = "github:catppuccin/bat";
flake = false;
};
catppuccin-btop = {
url = "github:catppuccin/btop";
flake = false;
};
catppuccin-mako = {
url = "github:catppuccin/mako";
flake = false;
};
# hydrogen nginx sites
resume = {
url = "git+https://git.fainsin.bzh/Laurent/resume";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
projet-intelligence-artificielle-multimedia = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/projet-intelligence-artificielle-multimedia";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
projet-modelisation-geometrique = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/projet-modelisation-geometrique";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
projet-systemes-algorithmes-repartis = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/projet-systemes-algorithmes-repartis";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
projet-audionumerique = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/projet-audionumerique";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
projet-oral-japonais = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/projet-oral-japonais";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
projet-oral-anglais = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/projet-oral-anglais";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
TP-calcul-parallele = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/TP-calcul-parallele";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
TP-reinforcement-learning = {
url = "git+https://git.fainsin.bzh/ENSEEIHT/TP-reinforcement-learning";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
inputs.systems.follows = "systems";
};
};
nixConfig = {
extra-substituters = [
"https://nix-community.cachix.org"
"https://hyprland.cachix.org"
];
extra-trusted-public-keys = [
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
"hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
];
};
outputs = {
agenix,
flake-parts,
treefmt-nix,
...
} @ inputs:
flake-parts.lib.mkFlake {inherit inputs;} {
systems = import inputs.systems;
imports = [
flake-parts.flakeModules.easyOverlay
treefmt-nix.flakeModule
];
perSystem = {
pkgs,
system,
...
}: rec {
formatter = pkgs.alejandra;
treefmt = {
projectRootFile = "flake.nix";
programs = {
alejandra.enable = true;
deadnix.enable = true;
};
};
devShells.default = pkgs.mkShell {
packages = [
formatter # defined above
pkgs.git # version control
agenix.packages.${system}.ragenix # secrets
pkgs.sbctl # secure boot utils
];
};
};
flake.nixosConfigurations = import ./hosts {inherit inputs;};
};
}