nixos-boxes/flake.nix at master · hensg/nixos-boxes · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
    nixvim = {
      #url = "github:hensg/nixvim";
      url = "path:///home/henrique/Projects/nixvim";
      inputs.nixpkgs.follows = "nixpkgs-unstable";
    };
    disko.url = "github:nix-community/disko";
    sops-nix.url = "github:Mic92/sops-nix";
    nix-bitcoin.url = "github:fort-nix/nix-bitcoin/release";
    simple-nixos-mailserver.url = "gitlab:simple-nixos-mailserver/nixos-mailserver/nixos-24.05";
    flake-utils.url = "github:numtide/flake-utils";
    hugo-site.url = "./nixos/website/hensg.dev/";
    ghostty.url = "github:ghostty-org/ghostty";
  };

  outputs =
    inputs@{
      nixpkgs,
      nixpkgs-unstable,
      flake-utils,
      nixvim,
      ghostty,
      disko,
      sops-nix,
      nix-bitcoin,
      simple-nixos-mailserver,
      hugo-site,
      ...
    }:
    let
      system = "x86_64-linux";
      unstablePkgs = import nixpkgs-unstable {
        inherit system;
        config.allowUnfree = true;
      };

      overlay-unstable = final: prev: {
        unstable = unstablePkgs;
      };

    in
    {
      nixosConfigurations = {
        desktop = nixpkgs.lib.nixosSystem {
          inherit system;
          specialArgs = {
            inherit inputs;
          };
          modules = [
            {
              nixpkgs.overlays = [
                overlay-unstable
              ];
            }
            nix-bitcoin.nixosModules.default
            disko.nixosModules.disko
            ./nixos/desktop/configuration.nix
            {
              environment.systemPackages = [
                ghostty.packages.x86_64-linux.default
              ];
            }
          ];
        };

        mailserver = nixpkgs.lib.nixosSystem {
          inherit system;
          specialArgs = {
            inherit inputs;
          };
          modules = [
            disko.nixosModules.disko
            sops-nix.nixosModules.sops
            simple-nixos-mailserver.nixosModules.default
            ./nixos/mailserver/configuration.nix
          ];
        };

        website = nixpkgs.lib.nixosSystem {
          inherit system;
          specialArgs = {
            inherit inputs hugo-site;
          };
          modules = [
            disko.nixosModules.disko
            ./nixos/website/configuration.nix
          ];
        };
      };
    }
    // flake-utils.lib.eachDefaultSystem (
      system:
      let
        pkgs = import nixpkgs {
          inherit system;
          config = {
            allowUnfree = true;
          };
        };
      in
      {
        devShell = pkgs.mkShell {
          sopsPGPKeyDirs = [ "./sopsKeys/" ];
          nativeBuildInputs = [ (pkgs.callPackage sops-nix { }).sops-import-keys-hook ];
          buildInputs = with pkgs; [
            rsync
            hugo
            just
            terraform
          ];
        };
      }
    );
}