KireinaHoro / flakes

NixOS flakes for KireinaHoro

Flakes collection by KireinaHoro

Per-host NixOS configuration is at nixos/. Secrets are protected via sops-nix.

Packages local to this flake are at pkgs/ and are managed by nvfetcher. Standalone ones not using nvfetcher should allow arbitrary arguments (for the source parameter from nvfetcher).

Note: due to a limitation in Nix flakes, it is not possible to input this flake in other flakes (without duplicating all the follows; see this pull request).

Updating

$ nix flake update
$ cd pkgs && nvfetcher build

The docker images for deploying over CI has the kage configuration built-in. If too much stuff had changed, rebuild docker images:

$ cd ci-images
$ podman pull nixos/nix
$ podman build -t docker.io/kireinahoro/flakes-base:v1 . -f flake-lock --network=host
$ podman push kireinahoro/flakes-base:v1
$ podman build -t docker.io/kireinahoro/flakes-ci:v1 . -f deploy --network=host
$ podman push kireinahoro/flakes-base:v1

Caveats

Squid

Squid requires the cache dirs to be populated with squid -z before first launch. As on NixOS the configuration files are generated, use systemctl status squid to find the location of the configuration file. Use nix shell .#squid to bring the squid binary into PATH.

Blog

Remember to update the lock file for blog input after updating the blog flake:

nix flake lock --update-input blog
deploy .#kage