Compare commits
No commits in common. "4c4a5f79c3ca0f43eb66e258fd75b56be14b3816" and "0e4b37925a218a89da8d867b7cd5ba48c81d54e2" have entirely different histories.
4c4a5f79c3
...
0e4b37925a
27
flake.lock
Normal file
27
flake.lock
Normal file
|
@ -0,0 +1,27 @@
|
||||||
|
{
|
||||||
|
"nodes": {
|
||||||
|
"nixpkgs": {
|
||||||
|
"locked": {
|
||||||
|
"lastModified": 1716361217,
|
||||||
|
"narHash": "sha256-mzZDr00WUiUXVm1ujBVv6A0qRd8okaITyUp4ezYRgc4=",
|
||||||
|
"owner": "NixOS",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"rev": "46397778ef1f73414b03ed553a3368f0e7e33c2f",
|
||||||
|
"type": "github"
|
||||||
|
},
|
||||||
|
"original": {
|
||||||
|
"owner": "NixOS",
|
||||||
|
"ref": "nixos-23.11",
|
||||||
|
"repo": "nixpkgs",
|
||||||
|
"type": "github"
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": {
|
||||||
|
"inputs": {
|
||||||
|
"nixpkgs": "nixpkgs"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"root": "root",
|
||||||
|
"version": 7
|
||||||
|
}
|
22
flake.nix
Normal file
22
flake.nix
Normal file
|
@ -0,0 +1,22 @@
|
||||||
|
{
|
||||||
|
inputs = {
|
||||||
|
nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.11";
|
||||||
|
};
|
||||||
|
|
||||||
|
outputs = { self, nixpkgs, ... }@inputs: {
|
||||||
|
nixosConfigurations = {
|
||||||
|
tohru = nixpkgs.lib.nixosSystem {
|
||||||
|
system = "x86_64-linux";
|
||||||
|
modules = [
|
||||||
|
./hosts/tohru/configuration.nix
|
||||||
|
];
|
||||||
|
};
|
||||||
|
yevaud = nixpkgs.lib.nixosSystem {
|
||||||
|
system = "x86_64-linux";
|
||||||
|
modules = [
|
||||||
|
./hosts/yevaud/configuration.nix
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
25
hive.nix
25
hive.nix
|
@ -1,25 +0,0 @@
|
||||||
let sources = import ./npins;
|
|
||||||
in {
|
|
||||||
meta = {
|
|
||||||
nixpkgs = sources.nixpkgs;
|
|
||||||
};
|
|
||||||
|
|
||||||
defaults = { pkgs, ... }: {
|
|
||||||
imports = [ ./pinning.nix ];
|
|
||||||
deployment.replaceUnknownProfiles = false;
|
|
||||||
};
|
|
||||||
|
|
||||||
tohru = { name, nodes, ... }: {
|
|
||||||
deployment = {
|
|
||||||
allowLocalDeployment = true;
|
|
||||||
targetHost = null;
|
|
||||||
};
|
|
||||||
|
|
||||||
imports = [ ./hosts/tohru/configuration.nix ];
|
|
||||||
};
|
|
||||||
|
|
||||||
yevaud = {
|
|
||||||
deployment.targetHost = "yevaud.birdsong.network";
|
|
||||||
imports = [ ./hosts/yevaud/configuration.nix ];
|
|
||||||
};
|
|
||||||
}
|
|
|
@ -38,20 +38,19 @@
|
||||||
isNormalUser = true;
|
isNormalUser = true;
|
||||||
extraGroups = [ "wheel" "networkmanager" ];
|
extraGroups = [ "wheel" "networkmanager" ];
|
||||||
packages = with pkgs; [
|
packages = with pkgs; [
|
||||||
bitwarden
|
|
||||||
firefox
|
|
||||||
tor-browser-bundle-bin
|
tor-browser-bundle-bin
|
||||||
|
firefox
|
||||||
|
tree
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
# List packages installed in system profile. To search, run:
|
# List packages installed in system profile. To search, run:
|
||||||
# $ nix search wget
|
# $ nix search wget
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
colmena
|
# vim # Do not forget to add an editor to edit configuration.nix! The Nano editor is also installed by default.
|
||||||
|
bitwarden
|
||||||
git
|
git
|
||||||
npins
|
|
||||||
plocate
|
plocate
|
||||||
tree
|
|
||||||
wget
|
wget
|
||||||
];
|
];
|
||||||
|
|
||||||
|
|
|
@ -1,47 +0,0 @@
|
||||||
# Generated by npins. Do not modify; will be overwritten regularly
|
|
||||||
let
|
|
||||||
data = builtins.fromJSON (builtins.readFile ./sources.json);
|
|
||||||
version = data.version;
|
|
||||||
|
|
||||||
mkSource = spec:
|
|
||||||
assert spec ? type; let
|
|
||||||
path =
|
|
||||||
if spec.type == "Git" then mkGitSource spec
|
|
||||||
else if spec.type == "GitRelease" then mkGitSource spec
|
|
||||||
else if spec.type == "PyPi" then mkPyPiSource spec
|
|
||||||
else if spec.type == "Channel" then mkChannelSource spec
|
|
||||||
else builtins.throw "Unknown source type ${spec.type}";
|
|
||||||
in
|
|
||||||
spec // { outPath = path; };
|
|
||||||
|
|
||||||
mkGitSource = { repository, revision, url ? null, hash, ... }:
|
|
||||||
assert repository ? type;
|
|
||||||
# At the moment, either it is a plain git repository (which has an url), or it is a GitHub/GitLab repository
|
|
||||||
# In the latter case, there we will always be an url to the tarball
|
|
||||||
if url != null then
|
|
||||||
(builtins.fetchTarball {
|
|
||||||
inherit url;
|
|
||||||
sha256 = hash; # FIXME: check nix version & use SRI hashes
|
|
||||||
})
|
|
||||||
else assert repository.type == "Git"; builtins.fetchGit {
|
|
||||||
url = repository.url;
|
|
||||||
rev = revision;
|
|
||||||
# hash = hash;
|
|
||||||
};
|
|
||||||
|
|
||||||
mkPyPiSource = { url, hash, ... }:
|
|
||||||
builtins.fetchurl {
|
|
||||||
inherit url;
|
|
||||||
sha256 = hash;
|
|
||||||
};
|
|
||||||
|
|
||||||
mkChannelSource = { url, hash, ... }:
|
|
||||||
builtins.fetchTarball {
|
|
||||||
inherit url;
|
|
||||||
sha256 = hash;
|
|
||||||
};
|
|
||||||
in
|
|
||||||
if version == 3 then
|
|
||||||
builtins.mapAttrs (_: mkSource) data.pins
|
|
||||||
else
|
|
||||||
throw "Unsupported format version ${toString version} in sources.json. Try running `npins upgrade`"
|
|
|
@ -1,23 +0,0 @@
|
||||||
{
|
|
||||||
"pins": {
|
|
||||||
"home-manager": {
|
|
||||||
"type": "Git",
|
|
||||||
"repository": {
|
|
||||||
"type": "GitHub",
|
|
||||||
"owner": "nix-community",
|
|
||||||
"repo": "home-manager"
|
|
||||||
},
|
|
||||||
"branch": "release-23.11",
|
|
||||||
"revision": "2c78a57c544dd19b07442350727ced097e1aa6e6",
|
|
||||||
"url": "https://github.com/nix-community/home-manager/archive/2c78a57c544dd19b07442350727ced097e1aa6e6.tar.gz",
|
|
||||||
"hash": "1zb4qsyn7l1zdiv1kjx07jvgnakpsifc62fxcim50w3ni27cwxk3"
|
|
||||||
},
|
|
||||||
"nixpkgs": {
|
|
||||||
"type": "Channel",
|
|
||||||
"name": "nixos-23.11",
|
|
||||||
"url": "https://releases.nixos.org/nixos/23.11/nixos-23.11.7313.9d29cd266ceb/nixexprs.tar.xz",
|
|
||||||
"hash": "0phfgypnshhlh6ri54yp2f9qabq0hlq06jn46zv692jy6axss4kx"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"version": 3
|
|
||||||
}
|
|
23
pinning.nix
23
pinning.nix
|
@ -1,23 +0,0 @@
|
||||||
{ config, pkgs, ... }:
|
|
||||||
let sources = import ./npins;
|
|
||||||
in {
|
|
||||||
# https://jade.fyi/blog/pinning-nixos-with-npins/
|
|
||||||
|
|
||||||
# We need the flakes experimental feature to do the NIX_PATH thing cleanly
|
|
||||||
# below. Given that this is literally the default config for flake-based
|
|
||||||
# NixOS installations in the upcoming NixOS 24.05, future Nix/Lix releases
|
|
||||||
# will not get away with breaking it.
|
|
||||||
nix.settings.experimental-features = "nix-command flakes";
|
|
||||||
|
|
||||||
# FIXME(24.05 or nixos-unstable): change following two rules to
|
|
||||||
#
|
|
||||||
# nixpkgs.flake.source = sources.nixpkgs;
|
|
||||||
#
|
|
||||||
# which does the exact same thing, using the same machinery as flake configs
|
|
||||||
# do as of 24.05.
|
|
||||||
nix.registry.nixpkgs.to = {
|
|
||||||
type = "path";
|
|
||||||
path = sources.nixpkgs;
|
|
||||||
};
|
|
||||||
nix.nixPath = ["nixpkgs=flake:nixpkgs"];
|
|
||||||
}
|
|
Loading…
Reference in a new issue