os/flake.nix

{
  description = "A highly structured configuration database.";

  nixConfig.extra-experimental-features = "nix-command flakes";

  inputs = {
    # Track channels with commits tested and built by hydra
    nixos.url = "github:nixos/nixpkgs/nixos-23.05";
    latest.url = "github:nixos/nixpkgs/nixos-unstable";

    fork.url = "github:teutat3s/nixpkgs/nvfetcher-fix";

    flake-compat.url = "github:edolstra/flake-compat";
    flake-compat.flake = false;

    digga.url = "github:pub-solar/digga/fix/bootstrap-iso";
    digga.inputs.nixpkgs.follows = "nixos";
    digga.inputs.nixlib.follows = "nixos";
    digga.inputs.home-manager.follows = "home";
    digga.inputs.deploy.follows = "deploy";
    digga.inputs.darwin.follows = "darwin";
    digga.inputs.flake-compat.follows = "flake-compat";

    home.url = "github:nix-community/home-manager/release-23.05";
    home.inputs.nixpkgs.follows = "nixos";

    darwin.url = "github:LnL7/nix-darwin";
    darwin.inputs.nixpkgs.follows = "nixos";

    deploy.url = "github:serokell/deploy-rs";
    deploy.inputs.nixpkgs.follows = "nixos";
    deploy.inputs.flake-compat.follows = "flake-compat";

    agenix.url = "github:ryantm/agenix";
    agenix.inputs.nixpkgs.follows = "nixos";
    agenix.inputs.darwin.follows = "darwin";

    nixos-hardware.url = "github:nixos/nixos-hardware";

    # hensoko additions
    musnix.url = "github:musnix/musnix";
    musnix.inputs.nixpkgs.follows = "nixos";

    nixpkgs-hensoko.url = "git+https://git.b12f.io/hensoko/nixpkgs";
  };

  outputs = {
    self,
    digga,
    nixos,
    home,
    nixos-hardware,
    agenix,
    deploy,
    musnix,
    ...
  } @ inputs:
    digga.lib.mkFlake
    {
      inherit self inputs;

      channelsConfig = {
        allowUnfree = true;
      };

      supportedSystems = ["x86_64-linux" "aarch64-linux" "aarch64-darwin"];

      channels = {
        nixos = {
          imports = [(digga.lib.importOverlays ./overlays)];
          overlays = [
            (self: super: {
              deploy-rs = {
                inherit (inputs.nixos.legacyPackages.x86_64-linux) deploy-rs;
                lib = inputs.deploy.lib.x86_64-linux;
              };
            })
          ];
        };
        latest = {};
        fork = {};
      };

      lib = import ./lib {lib = digga.lib // nixos.lib;};

      sharedOverlays = [
        (final: prev: {
          __dontExport = true;
          lib = prev.lib.extend (lfinal: lprev: {
            our = self.lib;
          });
        })
        agenix.overlays.default

        (import ./pkgs)
      ];

      nixos = {
        hostDefaults = {
          system = "x86_64-linux";
          channelName = "nixos";
          imports = [(digga.lib.importExportableModules ./modules)];
          modules = [
            {lib.our = self.lib;}
            # FIXME: upstream module causes a huge number of unnecessary
            # dependencies to be pulled in for all systems -- many of them are
            # graphical. should only be imported as needed.
            # digga.nixosModules.bootstrapIso
            digga.nixosModules.nixConfig
            home.nixosModules.home-manager
            agenix.nixosModules.age
          ];
        };

        imports = [(digga.lib.importHosts ./hosts)];
        hosts = {
          # Set host-specific properties here
          bootstrap = {
            modules = [
              digga.nixosModules.bootstrapIso
            ];
          };
          PubSolarOS = {
            tests = [
              #(import ./tests/first-test.nix {
              #  pkgs = nixos.legacyPackages.x86_64-linux;
              #  lib = nixos.lib;
              #})
            ];
          };

          companion = {
            system = "aarch64-linux";
            };
            cox = {
              system = "aarch64-linux";
            };
            falcone = {
              system = "aarch64-linux";
            };
            giggles = {
              system = "aarch64-linux";
            };

            norman = { };

            harrison = {
              modules = [
                musnix.nixosModules.musnix
              ];
            };

            surfplace = {
              modules = [ nixos-hardware.nixosModules.microsoft-surface-pro-intel ];
            };
        };
        importables = rec {
          profiles =
            digga.lib.rakeLeaves ./profiles
            // {
              users = digga.lib.rakeLeaves ./users;
            };
          suites = with profiles; rec {
            base = [ users.pub-solar users.root ];
            iso = base ++ [ base-user graphical pub-solar-iso ];
            pubsolaros = [ base-user users.root ];
            anonymous = [ pubsolaros users.pub-solar ];
            hensoko = pubsolaros ++ [ users.hensoko ];
            hensoko-iot = [ server base-user users.root users.iot ];

            # server
            cube = hensoko-iot;

            # home-controller
            companion = hensoko-iot;
            cox = hensoko-iot;
            giggles = hensoko-iot;

            # laptop
            ringo = hensoko;

            # vm
            redpanda = hensoko;

            # home pc
            harrison = hensoko ++ [ daw graphical non-free social work ];

            # work laptop
            norman = hensoko ++ [ graphical non-free social virtualisation work ];

            # cm4
            falcone = hensoko-iot;

            # surface
            surfplace = hensoko ++ [ graphical non-free social work ];
          };
        };

        home = {
          imports = [ (digga.lib.importExportableModules ./users/modules) ];
          modules = [ ];
          importables = rec {
            profiles = digga.lib.rakeLeaves ./users/profiles;
            suites = with profiles; rec {
              base = [ direnv git ];
            };
          };
          users = {
            pub-solar = { suites, ... }: { imports = suites.base; };
            hensoko = { suites, ... }: { imports = suites.base; };
            iot = { suites, ... }: { imports = suites.base; };
          }; # digga.lib.importers.rakeLeaves ./users/hm;
        };

        devshell = ./shell;

        homeConfigurations = digga.lib.mkHomeConfigurations self.nixosConfigurations;

        deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations {
          redpanda = {
            hostname = "192.168.42.71:22";
            sshUser = "hensoko";
            fastConnect = true;
            profilesOrder = [ "system" "direnv" ];
            profiles.direnv = {
              user = "hensoko";
              path = deploy.lib.x86_64-linux.activate.home-manager self.homeConfigurationsPortable.x86_64-linux.hensoko;
            };
          };

          companion = { sshUser = "iot"; };
          cox = { };
          giggles = { };
          ringo = { };
          cube = {
            sshUser = "iot";
          };
        };
        users = {
          pub-solar = {suites, ...}: { imports = suites.base; home.stateVersion = "21.03"; };
          hensoko = {suites, ...}: { imports = suites.base; home.stateVersion = "21.03"; };
          iot = {suites, ...}: { imports = suites.base; home.stateVersion = "21.03"; };
        }; # digga.lib.importers.rakeLeaves ./users/hm;
      };

      devshell = ./shell;

      homeConfigurations = digga.lib.mkHomeConfigurations self.nixosConfigurations;

      deploy.nodes = digga.lib.mkDeployNodes self.nixosConfigurations {
        #example = {
        #  hostname = "example.com:22";
        #  sshUser = "bartender";
        #  fastConnect = true;
        #  profilesOrder = ["system" "direnv"];
        #  profiles.direnv = {
        #    user = "bartender";
        #    path = self.pkgs.x86_64-linux.nixos.deploy-rs.lib.x86_64-linux.activate.home-manager self.homeConfigurationsPortable.x86_64-linux.bartender;
        #  };
        #};
        redpanda = {
          hostname = "192.168.42.71:22";
          sshUser = "hensoko";
          fastConnect = true;
          profilesOrder = [ "system" "direnv" ];
          profiles.direnv = {
            user = "hensoko";
            path = deploy.lib.x86_64-linux.activate.home-manager self.homeConfigurationsPortable.x86_64-linux.hensoko;
          };
        };
      };
    };
}