144 lines
3.6 KiB
Nix
144 lines
3.6 KiB
Nix
{
|
|
inputs = {
|
|
nixpkgs.url = "github:nixos/nixpkgs/nixos-24.05";
|
|
flake-parts.url = "github:hercules-ci/flake-parts";
|
|
|
|
snf.url = "git+https://git.fediversity.eu/fediversity/simple-nixos-fediverse.git";
|
|
disko.url = "github:nix-community/disko";
|
|
|
|
nixops4.url = "github:nixops4/nixops4";
|
|
nixops4-nixos.url = "github:nixops4/nixops4/eval";
|
|
};
|
|
|
|
outputs =
|
|
inputs@{
|
|
self,
|
|
flake-parts,
|
|
nixpkgs,
|
|
snf,
|
|
...
|
|
}:
|
|
flake-parts.lib.mkFlake { inherit inputs; } {
|
|
|
|
imports = [ inputs.nixops4-nixos.modules.flake.default ];
|
|
|
|
systems = [
|
|
"x86_64-linux"
|
|
"aarch64-linux"
|
|
"aarch64-darwin"
|
|
"x86_64-darwin"
|
|
];
|
|
|
|
perSystem =
|
|
{
|
|
config,
|
|
self',
|
|
inputs',
|
|
pkgs,
|
|
system,
|
|
...
|
|
}:
|
|
{
|
|
formatter = pkgs.nixfmt-rfc-style;
|
|
|
|
devShells.default = pkgs.mkShell { packages = [ inputs'.nixops4.packages.default ]; };
|
|
};
|
|
|
|
flake.allVmIds = [
|
|
"101"
|
|
"102"
|
|
"103"
|
|
"104"
|
|
"105"
|
|
"106"
|
|
"107"
|
|
"108"
|
|
"109"
|
|
"110"
|
|
];
|
|
|
|
flake.nixosConfigurations.provisioning =
|
|
let
|
|
inherit (builtins) map listToAttrs;
|
|
makeProvisioningConfiguration =
|
|
vmid:
|
|
nixpkgs.lib.nixosSystem {
|
|
modules = [
|
|
{ procolix.vmid = vmid; }
|
|
./procolixVm.nix
|
|
inputs.disko.nixosModules.default
|
|
];
|
|
};
|
|
in
|
|
listToAttrs (
|
|
map (vmid: {
|
|
name = "fedi${vmid}";
|
|
value = makeProvisioningConfiguration vmid;
|
|
}) self.allVmIds
|
|
);
|
|
|
|
flake.isoInstallers.provisioning =
|
|
let
|
|
inherit (builtins) mapAttrs;
|
|
in
|
|
mapAttrs (
|
|
vmname:
|
|
snf.mkInstaller {
|
|
inherit nixpkgs;
|
|
hostKeys = {
|
|
rsa = {
|
|
private = ./hostKeys/${vmname}/ssh_host_rsa_key;
|
|
public = ./hostKeys/${vmname}/ssh_host_rsa_key.pub;
|
|
};
|
|
ed25519 = {
|
|
private = ./hostKeys/${vmname}/ssh_host_ed25519_key;
|
|
public = ./hostKeys/${vmname}/ssh_host_ed25519_key.pub;
|
|
};
|
|
};
|
|
}
|
|
) self.nixosConfigurations.provisioning;
|
|
|
|
nixops4Deployments.default =
|
|
{ providers, ... }:
|
|
|
|
let
|
|
inherit (builtins) readFile;
|
|
|
|
makeProcolixVmResource = vmid: vmconfig: {
|
|
type = providers.local.exec;
|
|
imports = [ inputs.nixops4-nixos.modules.nixops4Resource.nixos ];
|
|
ssh.opts = "";
|
|
ssh.host = "95.215.187.${vmid}";
|
|
ssh.hostPublicKey = readFile ./hostKeys/fedi${vmid}/ssh_host_ed25519_key.pub;
|
|
|
|
nixpkgs = inputs.nixpkgs;
|
|
nixos.module =
|
|
{ pkgs, modulesPath, ... }:
|
|
{
|
|
imports = [
|
|
vmconfig
|
|
{ procolix.vmid = vmid; }
|
|
./procolixVm.nix
|
|
inputs.snf.nixosModules.fediversity
|
|
inputs.disko.nixosModules.default
|
|
];
|
|
};
|
|
};
|
|
|
|
in
|
|
{
|
|
providers.local = inputs.nixops4-nixos.modules.nixops4Provider.local;
|
|
|
|
resources = {
|
|
fedi101 = makeProcolixVmResource "101" {
|
|
fediversity = {
|
|
enable = true;
|
|
domain = "fediversity.niols.fr";
|
|
pixelfed.enable = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|