commit 96d3b3ac9822d109c7a8c84fab081cf621ffe0e7 · dunkirk.sh/dots

+37

.github/workflows/deploy.yaml

···

       1
       +
       name: Deploy NixOS Configurations

     

       2
       +
       

     

       3
       +
       on:

     

       4
       +
         push:

     

       5
       +
           branches:

     

       6
       +
             - main

     

       7
       +
         workflow_dispatch:

     

       8
       +
       

     

       9
       +
       jobs:

     

       10
       +
         deploy:

     

       11
       +
           runs-on: ubuntu-latest

     

       12
       +
           steps:

     

       13
       +
             - uses: actions/checkout@v4

     

       14
       +
             

     

       15
       +
             - name: Install Nix

     

       16
       +
               uses: DeterminateSystems/determinate-nix-action@main

     

       17
       +
             

     

       18
       +
             - name: Setup Tailscale

     

       19
       +
               uses: tailscale/github-action@v3

     

       20
       +
               with:

     

       21
       +
                 oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}

     

       22
       +
                 oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}

     

       23
       +
                 tags: tag:deploy

     

       24
       +
                 use-cache: "true"

     

       25
       +
             

     

       26
       +
             - name: Configure SSH

     

       27
       +
               run: |

     

       28
       +
                 mkdir -p ~/.ssh

     

       29
       +
                 echo "StrictHostKeyChecking accept-new" >> ~/.ssh/config

     

       30
       +
             

     

       31
       +
             - name: Deploy all configurations

     

       32
       +
               run: |

     

       33
       +
                 nix run github:serokell/deploy-rs -- \

     

       34
       +
                   --skip-checks \

     

       35
       +
                   --remote-build \

     

       36
       +
                   --ssh-opts="-o StrictHostKeyChecking=accept-new" \

     

       37
       +
                   .

+77 -5

flake.lock

···

       144
        
               "type": "github"

     

       145
        
             }

     

       146
        
           },

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       147
        
           "disko": {

     

       148
        
             "inputs": {

     

       149
        
               "nixpkgs": [

     
···

       165
        
             }

     

       166
        
           },

     

       167
        
           "flake-compat": {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       168
        
             "flake": false,

     

       169
        
             "locked": {

     

       170
        
               "lastModified": 1696426674,

     
···

       279
        
           },

     

       280
        
           "flake-utils_3": {

     

       281
        
             "inputs": {

     

       282
       -
               "systems": "systems_4"

     

       283
        
             },

     

       284
        
             "locked": {

     

       285
        
               "lastModified": 1731533236,

     
···

       297
        
           },

     

       298
        
           "flake-utils_4": {

     

       299
        
             "inputs": {

     

       300
       -
               "systems": "systems_5"

     

       301
        
             },

     

       302
        
             "locked": {

     

       303
        
               "lastModified": 1731533236,

     
···

       315
        
           },

     

       316
        
           "flake-utils_5": {

     

       317
        
             "inputs": {

     

       318
       -
               "systems": "systems_6"

     

       319
        
             },

     

       320
        
             "locked": {

     

       321
        
               "lastModified": 1731533236,

     
···

       847
        
           },

     

       848
        
           "pre-commit-hooks": {

     

       849
        
             "inputs": {

     

       850
       -
               "flake-compat": "flake-compat",

     

       851
        
               "gitignore": "gitignore",

     

       852
        
               "nixpkgs": "nixpkgs_7"

     

       853
        
             },

     
···

       873
        
               "cedarlogic": "cedarlogic",

     

       874
        
               "claude-desktop": "claude-desktop",

     

       875
        
               "ctfd-alerts": "ctfd-alerts",

     

       0
        
       
     

       876
        
               "disko": "disko",

     

       877
        
               "flare": "flare",

     

       878
        
               "frc-nix": "frc-nix",

     
···

       939
        
               "nixpkgs": [

     

       940
        
                 "nixpkgs"

     

       941
        
               ],

     

       942
       -
               "systems": "systems_7"

     

       943
        
             },

     

       944
        
             "locked": {

     

       945
        
               "lastModified": 1763985453,

     
···

       1060
        
               "type": "github"

     

       1061
        
             }

     

       1062
        
           },

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       1063
        
           "terminal-wakatime": {

     

       1064
        
             "inputs": {

     

       1065
        
               "nixpkgs": [

     
···

       1077
        
             "original": {

     

       1078
        
               "owner": "taciturnaxolotl",

     

       1079
        
               "repo": "terminal-wakatime",

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       1080
        
               "type": "github"

     

       1081
        
             }

     

       1082
        
           },

···

       144
        
               "type": "github"

     

       145
        
             }

     

       146
        
           },

     

       147
       +
           "deploy-rs": {

     

       148
       +
             "inputs": {

     

       149
       +
               "flake-compat": "flake-compat",

     

       150
       +
               "nixpkgs": [

     

       151
       +
                 "nixpkgs"

     

       152
       +
               ],

     

       153
       +
               "utils": "utils"

     

       154
       +
             },

     

       155
       +
             "locked": {

     

       156
       +
               "lastModified": 1762286984,

     

       157
       +
               "narHash": "sha256-9I2H9x5We6Pl+DBYHjR1s3UT8wgwcpAH03kn9CqtdQc=",

     

       158
       +
               "owner": "serokell",

     

       159
       +
               "repo": "deploy-rs",

     

       160
       +
               "rev": "9c870f63e28ec1e83305f7f6cb73c941e699f74f",

     

       161
       +
               "type": "github"

     

       162
       +
             },

     

       163
       +
             "original": {

     

       164
       +
               "owner": "serokell",

     

       165
       +
               "repo": "deploy-rs",

     

       166
       +
               "type": "github"

     

       167
       +
             }

     

       168
       +
           },

     

       169
        
           "disko": {

     

       170
        
             "inputs": {

     

       171
        
               "nixpkgs": [

     
···

       187
        
             }

     

       188
        
           },

     

       189
        
           "flake-compat": {

     

       190
       +
             "flake": false,

     

       191
       +
             "locked": {

     

       192
       +
               "lastModified": 1733328505,

     

       193
       +
               "narHash": "sha256-NeCCThCEP3eCl2l/+27kNNK7QrwZB1IJCrXfrbv5oqU=",

     

       194
       +
               "owner": "edolstra",

     

       195
       +
               "repo": "flake-compat",

     

       196
       +
               "rev": "ff81ac966bb2cae68946d5ed5fc4994f96d0ffec",

     

       197
       +
               "type": "github"

     

       198
       +
             },

     

       199
       +
             "original": {

     

       200
       +
               "owner": "edolstra",

     

       201
       +
               "repo": "flake-compat",

     

       202
       +
               "type": "github"

     

       203
       +
             }

     

       204
       +
           },

     

       205
       +
           "flake-compat_2": {

     

       206
        
             "flake": false,

     

       207
        
             "locked": {

     

       208
        
               "lastModified": 1696426674,

     
···

       317
        
           },

     

       318
        
           "flake-utils_3": {

     

       319
        
             "inputs": {

     

       320
       +
               "systems": "systems_5"

     

       321
        
             },

     

       322
        
             "locked": {

     

       323
        
               "lastModified": 1731533236,

     
···

       335
        
           },

     

       336
        
           "flake-utils_4": {

     

       337
        
             "inputs": {

     

       338
       +
               "systems": "systems_6"

     

       339
        
             },

     

       340
        
             "locked": {

     

       341
        
               "lastModified": 1731533236,

     
···

       353
        
           },

     

       354
        
           "flake-utils_5": {

     

       355
        
             "inputs": {

     

       356
       +
               "systems": "systems_7"

     

       357
        
             },

     

       358
        
             "locked": {

     

       359
        
               "lastModified": 1731533236,

     
···

       885
        
           },

     

       886
        
           "pre-commit-hooks": {

     

       887
        
             "inputs": {

     

       888
       +
               "flake-compat": "flake-compat_2",

     

       889
        
               "gitignore": "gitignore",

     

       890
        
               "nixpkgs": "nixpkgs_7"

     

       891
        
             },

     
···

       911
        
               "cedarlogic": "cedarlogic",

     

       912
        
               "claude-desktop": "claude-desktop",

     

       913
        
               "ctfd-alerts": "ctfd-alerts",

     

       914
       +
               "deploy-rs": "deploy-rs",

     

       915
        
               "disko": "disko",

     

       916
        
               "flare": "flare",

     

       917
        
               "frc-nix": "frc-nix",

     
···

       978
        
               "nixpkgs": [

     

       979
        
                 "nixpkgs"

     

       980
        
               ],

     

       981
       +
               "systems": "systems_8"

     

       982
        
             },

     

       983
        
             "locked": {

     

       984
        
               "lastModified": 1763985453,

     
···

       1099
        
               "type": "github"

     

       1100
        
             }

     

       1101
        
           },

     

       1102
       +
           "systems_8": {

     

       1103
       +
             "locked": {

     

       1104
       +
               "lastModified": 1681028828,

     

       1105
       +
               "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",

     

       1106
       +
               "owner": "nix-systems",

     

       1107
       +
               "repo": "default",

     

       1108
       +
               "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",

     

       1109
       +
               "type": "github"

     

       1110
       +
             },

     

       1111
       +
             "original": {

     

       1112
       +
               "owner": "nix-systems",

     

       1113
       +
               "repo": "default",

     

       1114
       +
               "type": "github"

     

       1115
       +
             }

     

       1116
       +
           },

     

       1117
        
           "terminal-wakatime": {

     

       1118
        
             "inputs": {

     

       1119
        
               "nixpkgs": [

     
···

       1131
        
             "original": {

     

       1132
        
               "owner": "taciturnaxolotl",

     

       1133
        
               "repo": "terminal-wakatime",

     

       1134
       +
               "type": "github"

     

       1135
       +
             }

     

       1136
       +
           },

     

       1137
       +
           "utils": {

     

       1138
       +
             "inputs": {

     

       1139
       +
               "systems": "systems_4"

     

       1140
       +
             },

     

       1141
       +
             "locked": {

     

       1142
       +
               "lastModified": 1731533236,

     

       1143
       +
               "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",

     

       1144
       +
               "owner": "numtide",

     

       1145
       +
               "repo": "flake-utils",

     

       1146
       +
               "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",

     

       1147
       +
               "type": "github"

     

       1148
       +
             },

     

       1149
       +
             "original": {

     

       1150
       +
               "owner": "numtide",

     

       1151
       +
               "repo": "flake-utils",

     

       1152
        
               "type": "github"

     

       1153
        
             }

     

       1154
        
           },

+48

flake.nix

···

       94
        
             url = "github:mrnossiom/wakatime-ls";

     

       95
        
             inputs.nixpkgs.follows = "nixpkgs";

     

       96
        
           };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       97
        
         };

     

       98
        
       

     

       99
        
         outputs =

     
···

       105
        
             home-manager,

     

       106
        
             nur,

     

       107
        
             nix-darwin,

     

       0
        
       
     

       108
        
             ...

     

       109
        
           }@inputs:

     

       110
        
           let

     
···

       244
        
       

     

       245
        
             formatter.x86_64-linux = nixpkgs.legacyPackages.x86_64-linux.nixfmt-tree;

     

       246
        
             formatter.aarch64-darwin = nixpkgs.legacyPackages.aarch64-darwin.nixfmt-tree;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       247
        
           };

     

       248
        
       }

···

       94
        
             url = "github:mrnossiom/wakatime-ls";

     

       95
        
             inputs.nixpkgs.follows = "nixpkgs";

     

       96
        
           };

     

       97
       +
       

     

       98
       +
           deploy-rs = {

     

       99
       +
             url = "github:serokell/deploy-rs";

     

       100
       +
             inputs.nixpkgs.follows = "nixpkgs";

     

       101
       +
           };

     

       102
        
         };

     

       103
        
       

     

       104
        
         outputs =

     
···

       110
        
             home-manager,

     

       111
        
             nur,

     

       112
        
             nix-darwin,

     

       113
       +
             deploy-rs,

     

       114
        
             ...

     

       115
        
           }@inputs:

     

       116
        
           let

     
···

       250
        
       

     

       251
        
             formatter.x86_64-linux = nixpkgs.legacyPackages.x86_64-linux.nixfmt-tree;

     

       252
        
             formatter.aarch64-darwin = nixpkgs.legacyPackages.aarch64-darwin.nixfmt-tree;

     

       253
       +
       

     

       254
       +
             # Deploy-rs configurations

     

       255
       +
             deploy.nodes = {

     

       256
       +
               # NixOS servers

     

       257
       +
               prattle = {

     

       258
       +
                 hostname = "prattle";

     

       259
       +
                 profiles.system = {

     

       260
       +
                   sshUser = "kierank";

     

       261
       +
                   user = "root";

     

       262
       +
                   path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.prattle;

     

       263
       +
                 };

     

       264
       +
               };

     

       265
       +
       

     

       266
       +
               terebithia = {

     

       267
       +
                 hostname = "terebithia";

     

       268
       +
                 profiles.system = {

     

       269
       +
                   sshUser = "kierank";

     

       270
       +
                   user = "root";

     

       271
       +
                   path = deploy-rs.lib.aarch64-linux.activate.nixos self.nixosConfigurations.terebithia;

     

       272
       +
                 };

     

       273
       +
               };

     

       274
       +
       

     

       275
       +
               # Home-manager machines

     

       276
       +
               nest = {

     

       277
       +
                 hostname = "nest";

     

       278
       +
                 profiles.home = {

     

       279
       +
                   user = "kierank";

     

       280
       +
                   path = deploy-rs.lib.x86_64-linux.activate.home-manager self.homeConfigurations.nest;

     

       281
       +
                 };

     

       282
       +
               };

     

       283
       +
       

     

       284
       +
               ember = {

     

       285
       +
                 hostname = "ember";

     

       286
       +
                 profiles.home = {

     

       287
       +
                   user = "kierank";

     

       288
       +
                   path = deploy-rs.lib.x86_64-linux.activate.home-manager self.homeConfigurations.ember;

     

       289
       +
                 };

     

       290
       +
               };

     

       291
       +
             };

     

       292
       +
       

     

       293
       +
             # Validation checks

     

       294
       +
             checks = builtins.mapAttrs (system: deployLib: deployLib.deployChecks self.deploy) deploy-rs.lib;

     

       295
        
           };

     

       296
        
       }