infrastructure/hive.nix
Tom Hubrecht 96e9f14e2d
Some checks failed
Check meta / check_meta (push) Successful in 17s
Check meta / check_meta (pull_request) Successful in 17s
Check meta / check_dns (push) Successful in 38s
Check meta / check_dns (pull_request) Successful in 35s
build configuration / build_compute01 (pull_request) Successful in 17m36s
build configuration / build_vault01 (pull_request) Successful in 17m10s
build configuration / build_web02 (pull_request) Failing after 1m32s
build configuration / build_web01 (pull_request) Successful in 1m56s
build configuration / build_rescue01 (pull_request) Successful in 1m18s
build configuration / build_storage01 (pull_request) Successful in 21m11s
build configuration / push_to_cache (pull_request) Has been skipped
build configuration / build_storage01 (push) Successful in 1m23s
build configuration / build_compute01 (push) Successful in 1m29s
build configuration / build_vault01 (push) Successful in 1m35s
build configuration / build_web01 (push) Successful in 1m51s
lint / check (push) Successful in 27s
build configuration / build_rescue01 (push) Successful in 1m12s
build configuration / build_web02 (push) Failing after 1m20s
build configuration / push_to_cache (push) Has been skipped
feat(infra): Switch to lix
2024-07-05 14:39:02 +02:00

115 lines
2.6 KiB
Nix

let
sources = import ./npins;
lib = import (sources.nix-lib + "/src/trivial.nix");
patch = import sources.nix-patches { patchFile = ./patches; };
nodes' = import ./meta/nodes.nix;
nodes = builtins.attrNames nodes';
mkNode = node: {
# Import the base configuration for each node
imports = builtins.map (lib.mkRel (./machines/${node})) [
"_configuration.nix"
"_hardware-configuration.nix"
];
};
nixpkgs' = import ./meta/nixpkgs.nix;
# All supported nixpkgs versions, instanciated
nixpkgs = lib.mapSingleFuse mkNixpkgs nixpkgs'.supported;
# Get the configured nixos version for the node,
# defaulting to the one defined in meta/nixpkgs
version = node: nodes'.${node}.nixpkgs or nixpkgs'.default;
# Builds a patched version of nixpkgs, only as the source
mkNixpkgs' =
v:
let
version = "nixos-${v}";
in
patch.mkNixpkgsSrc {
src = sources.${version};
inherit version;
};
# Instanciates the required nixpkgs version
mkNixpkgs = version: import (mkNixpkgs' version) { };
###
# Function to create arguments based on the node
#
mkArgs = node: rec {
lib = import sources.nix-lib {
inherit (nixpkgs.${version node}) lib;
keysRoot = ./keys;
};
meta = (import ./meta) lib;
nodeMeta = meta.nodes.${node};
};
in
{
meta = {
nodeNixpkgs = lib.mapSingleFuse (n: nixpkgs.${version n}) nodes;
specialArgs = {
inherit nixpkgs sources;
};
nodeSpecialArgs = lib.mapSingleFuse mkArgs nodes;
};
defaults =
{
pkgs,
name,
nodeMeta,
...
}:
{
# Import the default modules
imports = [
./modules
(import "${sources.lix-module}/module.nix" {
lix = pkgs.applyPatches {
name = "lix-2.90.patched";
src = sources.lix;
patches = [ ./patches/00-disable-installChecks-lix.patch ];
};
})
];
# Include default secrets
age-secrets.sources = [ ./machines/${name}/secrets ];
# Deployment config is specified in meta.nodes.${node}.deployment
inherit (nodeMeta) deployment;
nix = {
# Set NIX_PATH to the patched version of nixpkgs
nixPath = [ "nixpkgs=${mkNixpkgs' (version name)}" ];
optimise.automatic = true;
gc = {
automatic = true;
dates = "weekly";
options = "--delete-older-than 7d";
};
};
# Allow unfree packages
nixpkgs.config.allowUnfree = true;
# Use the stateVersion declared in the metadata
system = {
inherit (nodeMeta) stateVersion;
};
};
}
// (lib.mapSingleFuse mkNode nodes)