nixos-config/flake.nix

{
  description = "System config";

  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";

    home-manager = {
      url = "github:nix-community/home-manager";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    flake-utils.url = "github:numtide/flake-utils";

    flake-parts = {
      url = "github:hercules-ci/flake-parts";
    };

    nixos-hardware.url = "github:NixOS/nixos-hardware";

    pre-commit-hooks = {
      url = "github:cachix/pre-commit-hooks.nix";
      inputs = {
        flake-utils.follows = "flake-utils";
        nixpkgs.follows = "nixpkgs";
      };
    };

    nixinate = {
      url = "github:MatthewCroughan/nixinate";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    naersk = {
      url = "github:nix-community/naersk";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    rust-overlay = {
      url = "github:oxalica/rust-overlay";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
      };
    };

    microvm = {
      url = "github:astro/microvm.nix";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
      };
    };

    sops = {
      url = "github:Mic92/sops-nix";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    emacs-overlay = {
      url = "github:nix-community/emacs-overlay";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
      };
    };

    nil = {
      url = "github:oxalica/nil";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
        rust-overlay.follows = "rust-overlay";
      };
    };

    disko = {
      url = "github:nix-community/disko";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    eww = {
      url = "github:elkowar/eww";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        rust-overlay.follows = "rust-overlay";
      };
    };

    anyrun = {
      url = "github:Kirottu/anyrun";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    caddy-with-plugins = {
      url = "github:eboskma/caddy-with-plugins";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-parts.follows = "flake-parts";
      };
    };

    ha-now-playing = {
      url = "git+https://git.datarift.nl/erwin/ha-now-playing.git?ref=main";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
        rust-overlay.follows = "rust-overlay";
        pre-commit-hooks.follows = "pre-commit-hooks";
      };
    };

    pamedia = {
      url = "git+https://git.datarift.nl/erwin/pamedia-rs.git?ref=main";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
        naersk.follows = "naersk";
      };
    };

    sunshine = {
      url = "git+https://git@git.datarift.nl/erwin/sunshine.git?ref=main";
      inputs = {
        nixpkgs.follows = "nixpkgs";
        flake-utils.follows = "flake-utils";
      };
    };
  };

  outputs =
    { self
    , sops
    , nixinate
    , flake-parts
    , ...
    } @ inputs:
      with inputs; let
        machines = import ./machines inputs;
      in
      flake-parts.lib.mkFlake { inherit inputs; } {

        systems = [
          "x86_64-linux"
          "aarch64-linux"
        ];

        flake = {
          lib = import ./lib inputs;

          overlays.default = import ./overlays;

          nixosModules = builtins.listToAttrs (map
            (x: {
              name = x;
              value = import (./modules + "/${x}");
            })
            (builtins.attrNames (builtins.readDir ./modules)));

          nixosConfigurations = builtins.listToAttrs (map
            (machine: {
              name = machine;
              value = self.lib.defSystem (machines.${machine}.system or "x86_64-linux")
                {
                  imports = [
                    machines.${machine}.config
                  ];
                }
                (machines.${machine}.deploy or null);
            })
            (builtins.attrNames machines));

          apps = nixinate.nixinate.x86_64-linux self;

          colmena = {
            meta = {
              nixpkgs = import nixpkgs { system = "x86_64-linux"; };

              specialArgs = {
                inherit nixpkgs;
              };
            };
            drone = { lib, ... }: {
              deployment = {
                targetHost = "10.0.0.202";
                targetUser = "root";
              };
              imports =
                let
                  system = "x86_64-linux";
                  systemConfig = import ./machines/drone/configuration.nix inputs;
                in
                self.lib.systemModules system systemConfig;
            };
          };

        };

        perSystem = { self', pkgs, system, lib, ... }:
          {
            checks = {
              pre-commit-check = pre-commit-hooks.lib.${system}.run {
                src = ./.;
                hooks = {
                  nixpkgs-fmt.enable = true;
                  deadnix.enable = true;
                  statix.enable = true;
                  black.enable = true;
                  shellcheck = {
                    enable = true;
                    types_or = [ "executable" ];
                  };
                  shfmt.enable = true;
                };
              };

            };

            devShells.default = with pkgs;
              mkShell {
                inherit (self'.checks.pre-commit-check) shellHook;
                name = "dotfiles";
                packages = [
                  pkgs.sops
                  ssh-to-age
                  age
                  nodejs
                  nodePackages.typescript-language-server
                  nodePackages.yaml-language-server
                  nodePackages.vscode-css-languageserver-bin
                  nodePackages.prettier
                  multimarkdown
                  nix-diff
                  nix-prefetch
                  nix-prefetch-scripts
                  nix-prefetch-github
                  nix-prefetch-docker
                  nix-top
                  opentofu
                  terraform-ls
                  taplo
                  just
                  pciutils

                  (cryptsetup.override {
                    withInternalArgon2 = true;
                  })

                  disko.packages.${system}.disko
                ];
              };

            devShells.install = with pkgs; mkShell {
              name = "install";
              packages = [
                disko.packages.${system}.disko
              ];
            };

            formatter = pkgs.nixpkgs-fmt;
          };
      };
}