default.nix

@@ -58,11 +58,6 @@ in
       in
       [
         pkgs.npins
-        pkgs.nil
-        pkgs.agenix-cli
-        pkgs.openssh
-        pkgs.httpie
-        pkgs.jq
         pkgs.nix-unit
         test-loop
         nixops4.packages.${system}.default

flake.nix

@@ -11,7 +11,7 @@
     let
       sources = import ./npins;
       inherit (import sources.flake-inputs) import-flake;
-      inherit (sources) git-hooks;
+      inherit (sources) git-hooks agenix;
       # XXX(@fricklerhandwerk): this atrocity is required to splice in a foreign Nixpkgs via flake-parts
       # XXX - this is just importing a flake
       nixpkgs = import-flake { src = sources.nixpkgs; };
@@ -54,6 +54,7 @@
             {
               pkgs,
               lib,
+              inputs',
               ...
             }:
             {
@@ -72,6 +73,21 @@
                   trim-trailing-whitespace.enable = true;
                   shellcheck.enable = true;
                 };
+
+              devShells.default = pkgs.mkShell {
+                packages = [
+                  pkgs.npins
+                  pkgs.nil
+                  (pkgs.callPackage "${agenix}/pkgs/agenix.nix" { })
+                  pkgs.openssh
+                  pkgs.httpie
+                  pkgs.jq
+                  # exposing this env var as a hack to pass info in from form
+                  (inputs'.nixops4.packages.default.overrideAttrs {
+                    impureEnvVars = [ "DEPLOYMENT" ];
+                  })
+                ];
+              };
             };
         }
       );

infra/common/nixos/networking.nix

@@ -1,7 +1,7 @@
 { config, lib, ... }:
 
 let
-  inherit (lib) mkDefault mkIf mkMerge;
+  inherit (lib) mkDefault;
 
 in
 {
@@ -13,14 +13,41 @@ in
       settings.PasswordAuthentication = false;
     };
 
-    networking = mkMerge [
+    networking = {
-      {
       hostName = config.fediversityVm.name;
       domain = config.fediversityVm.domain;
 
       ## REVIEW: Do we actually need that, considering that we have static IPs?
       useDHCP = mkDefault true;
 
+      interfaces = {
+        eth0 = {
+          ipv4 = {
+            addresses = [
+              {
+                inherit (config.fediversityVm.ipv4) address prefixLength;
+              }
+            ];
+          };
+          ipv6 = {
+            addresses = [
+              {
+                inherit (config.fediversityVm.ipv6) address prefixLength;
+              }
+            ];
+          };
+        };
+      };
+
+      defaultGateway = {
+        address = config.fediversityVm.ipv4.gateway;
+        interface = "eth0";
+      };
+      defaultGateway6 = {
+        address = config.fediversityVm.ipv6.gateway;
+        interface = "eth0";
+      };
+
       nameservers = [
         "95.215.185.6"
         "95.215.185.7"
@@ -33,29 +60,6 @@ in
         enable = true;
         rulesetFile = ./nftables-ruleset.nft;
       };
-      }
-
-      ## IPv4
-      (mkIf config.fediversityVm.ipv4.enable {
-        interfaces.${config.fediversityVm.ipv4.interface}.ipv4.addresses = [
-          { inherit (config.fediversityVm.ipv4) address prefixLength; }
-        ];
-        defaultGateway = {
-          address = config.fediversityVm.ipv4.gateway;
-          interface = config.fediversityVm.ipv4.interface;
     };
-      })
-
-      ## IPv6
-      (mkIf config.fediversityVm.ipv6.enable {
-        interfaces.${config.fediversityVm.ipv6.interface}.ipv6.addresses = [
-          { inherit (config.fediversityVm.ipv6) address prefixLength; }
-        ];
-        defaultGateway6 = {
-          address = config.fediversityVm.ipv6.gateway;
-          interface = config.fediversityVm.ipv6.interface;
-        };
-      })
-    ];
   };
 }

infra/common/options.nix

@@ -91,17 +91,6 @@ in
     };
 
     ipv4 = {
-      enable = mkOption {
-        default = true;
-      };
-
-      interface = mkOption {
-        description = ''
-          The interface that carries the machine's IPv4 network.
-        '';
-        default = "eth0";
-      };
-
       address = mkOption {
         description = ''
           The IP address of the machine, version 4. It will be injected as a
@@ -127,17 +116,6 @@ in
     };
 
     ipv6 = {
-      enable = mkOption {
-        default = true;
-      };
-
-      interface = mkOption {
-        description = ''
-          The interface that carries the machine's IPv6 network.
-        '';
-        default = "eth0";
-      };
-
       address = mkOption {
         description = ''
           The IP address of the machine, version 6. It will be injected as a