forked from Fediversity/Fediversity
Kiara Grouwstra
9c40fd0bfb
Closes #76. Note I had not yet manage to successfully test this. Manually trying the parameterized NixOps4 I tried using the following command, tho I had yet to get this to work as well: ```sh DEPLOYMENT='{"domain": "fediversity.net", "mastodon": {"enable": false}, "pixelfed": {"enable": true}, "peertube": {"enable": false}}' nix develop --extra-experimental-features "configurable-impure-env" --command nixops4 apply test ``` (or rather, I used a hardcoded Nix here so as to make it not use Lix.) So far this had failed for me with: ``` the following units failed: acme-mastodon.web.garage.fediversity.net.service ... nixops4 error: Failed to create resource garage-configuration ```
51 lines
1.3 KiB
Nix
51 lines
1.3 KiB
Nix
{
|
|
system ? builtins.currentSystem,
|
|
sources ? import ../npins,
|
|
pkgs ? import sources.nixpkgs {
|
|
inherit system;
|
|
config = { };
|
|
overlays = [ (import ./nix/overlay.nix) ];
|
|
},
|
|
}:
|
|
let
|
|
package = pkgs.callPackage ./nix/package.nix { };
|
|
|
|
pkgs' = pkgs.extend (_final: _prev: { panel = package; });
|
|
|
|
manage = pkgs.writeScriptBin "manage" ''
|
|
exec ${pkgs.lib.getExe pkgs.python3} ${toString ./src/manage.py} $@
|
|
'';
|
|
in
|
|
{
|
|
shell = pkgs.mkShellNoCC {
|
|
inputsFrom = [ package ];
|
|
packages = [
|
|
pkgs.npins
|
|
manage
|
|
];
|
|
env = {
|
|
NPINS_DIRECTORY = toString ../npins;
|
|
};
|
|
shellHook = ''
|
|
# in production, secrets are passed via CREDENTIALS_DIRECTORY by systemd.
|
|
# use this directory for testing with local secrets
|
|
mkdir -p .credentials
|
|
echo secret > ${builtins.toString ./.credentials}/SECRET_KEY
|
|
export CREDENTIALS_DIRECTORY=${builtins.toString ./.credentials}
|
|
export DATABASE_URL="sqlite:///${toString ./src}/db.sqlite3"
|
|
'';
|
|
# FIXME: ending a path in a non-name produces a double hash :(
|
|
REPO_DIR = ./..;
|
|
};
|
|
|
|
tests = pkgs'.callPackage ./nix/tests.nix { };
|
|
inherit package;
|
|
|
|
# re-export inputs so they can be overridden granularly
|
|
# (they can't be accessed from the outside any other way)
|
|
inherit
|
|
sources
|
|
system
|
|
pkgs
|
|
;
|
|
}
|