nix-infra/flake.nix

280 lines
8.6 KiB
Nix
Raw Normal View History

{
description = "CCCHH Nix Infrastructure";
inputs = {
# Use the NixOS small channels for nixpkgs.
# https://nixos.org/manual/nixos/stable/#sec-upgrading
# https://github.com/NixOS/nixpkgs
nixpkgs.url = "github:nixos/nixpkgs/nixos-24.11-small";
# Add nixos-generators as an input.
# See here: https://github.com/nix-community/nixos-generators#using-in-a-flake
nixos-generators = {
url = "github:nix-community/nixos-generators";
#inputs.nixpkgs.follows = "nixpkgs";
};
# Add sops-nix as an input for secret management.
# See here: https://github.com/Mic92/sops-nix?tab=readme-ov-file#flakes-current-recommendation
sops-nix = {
url = "github:Mic92/sops-nix";
inputs.nixpkgs.follows = "nixpkgs";
};
2024-11-17 20:29:04 +01:00
authorizedKeysRepo = {
2024-11-17 21:14:46 +01:00
url = "https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/archive/686a6af22f6696f0c0595c56f463c078550049fc.tar.gz";
2024-11-17 20:29:04 +01:00
flake = false;
};
};
2024-11-17 20:29:04 +01:00
outputs = { self, nixpkgs, nixos-generators, sops-nix, authorizedKeysRepo, ... }:
let
2024-11-17 20:29:04 +01:00
specialArgs = {
inherit authorizedKeysRepo;
};
system = "x86_64-linux";
in
{
2024-11-05 00:02:41 +01:00
overlays = {
shairportSyncAirplay2 = final: prev: {
shairport-sync = (prev.shairport-sync.override { enableMetadata = true; enableAirplay2 = true; }).overrideAttrs (finalAttr: previousAttr: {
# See: https://github.com/mikebrady/shairport-sync/blob/e78a88b64adfe7b5f88fd6faedf55c57445bb240/CONFIGURATION%20FLAGS.md
configureFlags = previousAttr.configureFlags ++ [ "--with-mqtt-client" ];
buildInputs = previousAttr.buildInputs ++ [ final.mosquitto ];
});
};
};
2024-11-05 22:43:53 +01:00
nixosModules = {
common = ./config/common;
proxmox-vm = ./config/proxmox-vm;
prometheus-exporter = ./config/extra/prometheus-exporter.nix;
};
nixosConfigurations = {
audio-hauptraum-kueche = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
2024-11-05 00:02:41 +01:00
{ nixpkgs.overlays = [ self.overlays.shairportSyncAirplay2 ]; }
./config/hosts/audio-hauptraum-kueche
];
};
audio-hauptraum-tafel = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
2024-11-05 00:02:41 +01:00
{ nixpkgs.overlays = [ self.overlays.shairportSyncAirplay2 ]; }
./config/hosts/audio-hauptraum-tafel
];
};
2023-09-14 22:12:38 +02:00
esphome = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
./config/hosts/esphome
];
2023-11-04 20:49:02 +01:00
};
public-reverse-proxy = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
./config/hosts/public-reverse-proxy
];
2023-11-04 22:20:49 +01:00
};
netbox = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/netbox
];
2023-09-14 22:12:38 +02:00
};
2023-09-14 23:52:20 +02:00
matrix = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/matrix
];
2023-09-14 23:52:20 +02:00
};
public-web-static = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/public-web-static
];
};
git = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/git
];
};
forgejo-actions-runner = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/forgejo-actions-runner
];
};
ptouch-print-server = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
./config/hosts/ptouch-print-server
];
};
2024-05-17 20:42:48 +02:00
eh22-wiki = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
self.nixosModules.prometheus-exporter
2024-05-17 20:42:48 +02:00
./config/hosts/eh22-wiki
];
};
nix-box-june = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
self.nixosModules.prometheus-exporter
./config/hosts/nix-box-june
];
};
2024-06-08 20:18:59 +02:00
yate = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
2024-06-08 20:18:59 +02:00
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
2024-06-08 20:18:59 +02:00
./config/hosts/yate
];
};
mqtt = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
./config/hosts/mqtt
];
};
mjolnir = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/mjolnir
];
};
woodpecker = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/woodpecker
];
};
2024-08-04 02:19:26 +02:00
status = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
2024-08-04 02:19:26 +02:00
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
2024-08-04 02:19:26 +02:00
sops-nix.nixosModules.sops
./config/hosts/status
];
};
penpot = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
sops-nix.nixosModules.sops
2024-11-05 22:43:53 +01:00
self.nixosModules.prometheus-exporter
./config/hosts/penpot
];
};
2024-10-30 01:44:12 +01:00
hydra = nixpkgs.lib.nixosSystem {
2024-11-17 20:29:04 +01:00
inherit system specialArgs;
2024-10-30 01:44:12 +01:00
modules = [
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
self.nixosModules.prometheus-exporter
2024-10-30 01:44:12 +01:00
./config/hosts/hydra
];
};
};
packages.x86_64-linux = {
proxmox-nixos-template = nixos-generators.nixosGenerate {
2024-11-17 20:29:04 +01:00
inherit specialArgs;
system = "x86_64-linux";
modules = [
./config/nixos-generators/proxmox.nix
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
];
format = "proxmox";
};
proxmox-chaosknoten-nixos-template = nixos-generators.nixosGenerate {
2024-11-17 20:29:04 +01:00
inherit specialArgs;
system = "x86_64-linux";
modules = [
./config/nixos-generators/proxmox-chaosknoten.nix
./config/proxmox-chaosknoten-additional-initial-config.nix
2024-11-05 22:43:53 +01:00
self.nixosModules.common
self.nixosModules.proxmox-vm
];
format = "proxmox";
};
};
formatter.x86_64-linux = nixpkgs.legacyPackages.x86_64-linux.nixpkgs-fmt;
hydraJobs = {
inherit (self) packages;
nixosConfigurations = builtins.mapAttrs (name: value: value.config.system.build.toplevel) self.nixosConfigurations;
};
};
}