dotfiles/flake.nix

{
  description = "NixOS configuration with flakes";
  outputs = {
    alejandra,
    darwin,
    disko,
    endless-sky,
    flake-compat,
    flake-utils,
    helix,
    home-manager,
    nil,
    nix-ld,
    nixos-hardware,
    nixpkgs-master,
    nixpkgs-nixos-unstable,
    nixpkgs-rust-analyzer,
    nixpkgs-stable,
    nur,
    self,
    sops,
    veracrypt,
  } @ inputs: let
    mkServer = pkgs: system: hostname:
      pkgs.lib.nixosSystem {
        inherit system;
        modules = [
          (./. + "/nixos/boxes/${hostname}")
          (import ./nixos/server-common.nix)
          sops.nixosModules.sops
          disko.nixosModules.disko
        ];
        specialArgs = {inherit inputs system;};
      };
    mkRaspi = pkgs: hostname:
      pkgs.lib.nixosSystem {
        system = "aarch64-linux";
        modules = [
          (./. + "/nixos/boxes/${hostname}")
          sops.nixosModules.sops
        ];
        specialArgs = {inherit inputs;};
      };
    mkKiosk = pkgs: system: hostname:
      pkgs.lib.nixosSystem {
        inherit system;
        modules = [
          (./. + "/nixos/boxes/${hostname}")
          (import ./nixos/common.nix)
          sops.nixosModules.sops

          home-manager.nixosModules.home-manager
          {
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            home-manager.users.cyryl = {
              imports = [./nixos/home-manager ./nixos/home-manager/linux.nix];
              _module.args.inputs = inputs;
              _module.args.system = system;
            };
          }
        ];
        specialArgs = {
          inherit inputs system;
          nixpkgs-nixos-stable-and-unfree = import nixpkgs-stable {
            inherit system;
            config = {allowUnfree = true;};
          };
          nixpkgs-nixos-unstable-and-unfree = import nixpkgs-nixos-unstable {
            inherit system;
            config = {allowUnfree = true;};
          };
        };
      };
    mkWorkstation = pkgs: system: hostname:
      pkgs.lib.nixosSystem {
        inherit system;
        modules = [
          (./. + "/nixos/boxes/${hostname}")
          (import ./nixos/email-accounts.nix)
          (import ./nixos/common.nix)
          sops.nixosModules.sops
          disko.nixosModules.disko
          nix-ld.nixosModules.nix-ld
          {programs.nix-ld.dev.enable = true;}
          home-manager.nixosModules.home-manager
          {
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            home-manager.users.cyryl = {
              imports = [./nixos/home-manager ./nixos/home-manager/linux.nix];
              _module.args.inputs = inputs;
              _module.args.system = system;
            };
          }
        ];
        specialArgs = {
          inherit inputs system;
          nixpkgs-nixos-stable-and-unfree = import nixpkgs-stable {
            inherit system;
            config = {allowUnfree = true;};
          };
          nixpkgs-nixos-unstable = import nixpkgs-nixos-unstable {
            inherit system;
          };
          nixpkgs-nixos-unstable-and-unfree = import nixpkgs-nixos-unstable {
            inherit system;
            config = {allowUnfree = true;};
          };
          nixpkgs-veracrypt = import veracrypt {
            inherit system;
            config = {allowUnfree = true;};
          };
        };
      };
    mkShell = packageSet: system: let
      pkgs = packageSet.legacyPackages.${system};
    in
      pkgs.mkShell {
        packages = with pkgs; [
          inputs.alejandra.defaultPackage.${system}
          cacert
          git
          git-lfs
          nixpkgs-fmt
          openssh
          openssl
          pkg-config
          statix
        ];
      };
  in {
    devShells = {
      "x86_64-darwin".default = mkShell nixpkgs-stable "x86_64-darwin";
      "x86_64-linux".default = mkShell nixpkgs-stable "x86_64-linux";
    };
    darwinConfigurations = {
      "FORM3-CYRYLPLOTN" = darwin.lib.darwinSystem rec {
        system = "x86_64-darwin";
        modules = [
          (./. + "/nixos/boxes/form3")
          home-manager.darwinModules.home-manager
          {
            home-manager.useGlobalPkgs = true;
            home-manager.useUserPackages = true;
            home-manager.users.cyryl = {
              imports = [./nixos/home-manager];
              _module.args.inputs = inputs;
              _module.args.system = system;
            };
          }
        ];
      };
    };

    nixosConfigurations = {
      foryog = mkWorkstation nixpkgs-stable "x86_64-linux" "foryog";
      thinky = mkWorkstation nixpkgs-stable "x86_64-linux" "thinky";
      bolty = mkServer nixpkgs-stable "x86_64-linux" "bolty";
      vpsfree1 = mkServer nixpkgs-stable "x86_64-linux" "vpsfree1";
      mb1 = mkServer nixpkgs-stable "x86_64-linux" "mb1";
      homescreen = mkRaspi nixpkgs-stable "homescreen";

      bootstrap = nixpkgs-stable.lib.nixosSystem rec {
        system = "x86_64-linux";
        modules = [(./. + "/nixos/boxes/bootstrap") sops.nixosModules.sops];
        specialArgs = {
          inherit inputs system;
          nixpkgs-nixos-unstable-and-unfree = import nixpkgs-nixos-unstable {
            inherit system;
            config = {allowUnfree = true;};
          };
        };
      };
      # nix build .#nixosConfigurations.raspiimage.config.system.build.sdImage
      # sudo dd if=result/sd-image/nixos-sd-image-21.11.20211201.a640d83-aarch64-linux.img of=/dev/sda bs=4M conv=fsync status=progress
      # make sure to update eeprom https://nixos.wiki/wiki/NixOS_on_ARM/Raspberry_Pi_4#Board-specific_installation_notes
      raspiimage = nixpkgs-stable.lib.nixosSystem {
        system = "aarch64-linux";
        modules = [
          (import
            "${inputs.nixpkgs-stable}/nixos/modules/installer/sd-card/sd-image-aarch64-installer.nix")
          {
            environment.systemPackages = with nixpkgs-nixos-unstable.legacyPackages."aarch64-linux"; [
              neovim
              htop
              btop
              atop
            ];

            networking.networkmanager.enable = false;
            hardware.enableRedistributableFirmware = true;
            networking.wireless.enable = true;

            services.openssh = {
              enable = true;
              permitRootLogin =
                nixpkgs-stable.lib.mkForce "prohibit-password";
              passwordAuthentication = false;
            };

            services.xserver = {
              enable = true;
              displayManager.lightdm.enable = true;
              desktopManager.gnome.enable = true;
              libinput.enable = true;
            };

            users.extraUsers.root.openssh.authorizedKeys.keys = [
              "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEo4R+6J3h6Ix3xWpOMdU7Es1/YxFchHw0c+kcCOJxFb cyryl@foureighty"
            ];
            sdImage.compressImage = false;
            console.earlySetup = true;
          }
        ];
        specialArgs = {inherit inputs;};
      };
    };
  };
  inputs = {
    nixpkgs-master = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "master";
    };
    nixpkgs-nixos-unstable = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "nixos-unstable";
    };
    nixpkgs-stable = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "nixos-23.11";
    };
    nixpkgs-rust-analyzer = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "master";
    };
    endless-sky = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "2100c4926200b1ebbee032ad22113597195932f2";
    };
    veracrypt = {
      type = "github";
      owner = "NixOS";
      repo = "nixpkgs";
      ref = "2bbbf414fed6ab89cd971f5645da692dad6d9420";
    };
    nixos-hardware = {
      type = "github";
      owner = "NixOS";
      repo = "nixos-hardware";
      ref = "master";
    };
    darwin = {
      url = "github:lnl7/nix-darwin/master";
      inputs.nixpkgs.follows = "nixpkgs-stable";
    };
    home-manager = {
      type = "github";
      owner = "nix-community";
      repo = "home-manager";
      ref = "release-23.11";
      inputs.nixpkgs.follows = "nixpkgs-stable";
    };
    flake-utils = {
      type = "github";
      owner = "numtide";
      repo = "flake-utils";
      ref = "main";
    };
    nur = {
      type = "github";
      owner = "nix-community";
      repo = "NUR";
      ref = "master";
    };
    nil = {
      type = "github";
      owner = "oxalica";
      repo = "nil";
      ref = "main";
      inputs.nixpkgs.follows = "nixpkgs-nixos-unstable";
      inputs.flake-utils.follows = "flake-utils";
    };
    nix-ld = {
      type = "github";
      owner = "Mic92";
      repo = "nix-ld";
      ref = "main";
      inputs.nixpkgs.follows = "nixpkgs-stable";
    };
    helix = {
      type = "github";
      owner = "helix-editor";
      repo = "helix";
      ref = "master";
      inputs.nixpkgs.follows = "nixpkgs-stable";
      inputs.flake-utils.follows = "flake-utils";
    };
    sops = {
      type = "github";
      owner = "Mic92";
      repo = "sops-nix";
      ref = "master";
      inputs.nixpkgs.follows = "nixpkgs-stable";
      inputs.nixpkgs-stable.follows = "nixpkgs-stable";
    };
    alejandra = {
      type = "github";
      owner = "kamadorueda";
      repo = "alejandra";
      ref = "main";
      inputs.nixpkgs.follows = "nixpkgs-nixos-unstable";
    };
    disko = {
      url = "github:nix-community/disko";
      inputs.nixpkgs.follows = "nixpkgs-stable";
    };
    flake-compat = {
      url = "github:edolstra/flake-compat";
      flake = false;
    };
  };
}