349 lines
11 KiB
Nix
Executable File
349 lines
11 KiB
Nix
Executable File
{ config, pkgs, ... }:
|
|
{
|
|
# "https://cache.mjallen.dev"
|
|
# "cache.mjallen.dev-1:IzFmKCd8/gggI6lcCXsW65qQwiCLGFFN9t9s2iw7Lvc="
|
|
services.nix-serve = {
|
|
enable = false;
|
|
package = pkgs.nix-serve-ng;
|
|
secretKeyFile = "/etc/nix/cache-priv-key.pem";
|
|
port = 5000; # Choose your preferred port
|
|
openFirewall = true;
|
|
};
|
|
|
|
services.atticd = {
|
|
enable = true;
|
|
environmentFile = config.sops.secrets."jallen-nas/attic-key".path;
|
|
settings = {
|
|
listen = "[::]:9012";
|
|
};
|
|
};
|
|
|
|
# Improved systemd service with better error handling
|
|
systemd = {
|
|
services = {
|
|
attic-watch-store = {
|
|
enable = true;
|
|
description = "watch store for cache";
|
|
serviceConfig = {
|
|
Type = "simple";
|
|
User = "admin";
|
|
Group = "jallen-nas";
|
|
WorkingDirectory = "/etc/nixos";
|
|
StandardOutput = "journal+console";
|
|
StandardError = "journal+console";
|
|
Restart = "always";
|
|
restartSec = "5";
|
|
};
|
|
path = with pkgs; [
|
|
bash
|
|
attic-client
|
|
];
|
|
script = ''
|
|
#!/usr/bin/env bash
|
|
attic watch-store nas-cache
|
|
'';
|
|
};
|
|
|
|
nix-rebuild-cache-desktop = {
|
|
enable = true;
|
|
description = "Rebuild desktop NixOS configurations for cache";
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
User = "admin";
|
|
Group = "jallen-nas";
|
|
WorkingDirectory = "/etc/nixos";
|
|
StandardOutput = "journal+console";
|
|
StandardError = "journal+console";
|
|
Restart = "no";
|
|
# Increase timeout for large builds
|
|
TimeoutStartSec = "2h";
|
|
};
|
|
path = with pkgs; [
|
|
nix
|
|
git
|
|
uutils-coreutils
|
|
gnugrep
|
|
gnused
|
|
openssh
|
|
];
|
|
script = ''
|
|
#!/usr/bin/env bash
|
|
|
|
# Pull latest changes if in a git repo
|
|
if [ -d .git ]; then
|
|
git pull || echo "Warning: Could not pull latest changes"
|
|
fi
|
|
|
|
echo "Starting build of matt-nixos at $(date)"
|
|
if nix flake update desktop-nixpkgs desktop-chaotic desktop-home-manager desktop-impermanence desktop-lanzaboote desktop-nixos-hardware desktop-sops-nix desktop-steam-rom-manager nixpkgs-unstable nixpkgs-stable nix-darwin; then
|
|
echo "matt-nixos flake updated successfully at $(date)"
|
|
else
|
|
echo "matt-nixos failed to build at $(date)"
|
|
fi
|
|
if nix build .\#nixosConfigurations.matt-nixos.config.system.build.toplevel --no-link; then
|
|
echo "matt-nixos built successfully at $(date)"
|
|
git add .
|
|
git commit -m "Desktop Updates $(date)"
|
|
else
|
|
echo "matt-nixos failed to build at $(date)"
|
|
git reset --hard
|
|
fi
|
|
'';
|
|
};
|
|
nix-rebuild-cache-steamdeck = {
|
|
enable = true;
|
|
description = "Rebuild steamdeck NixOS configurations for cache";
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
User = "admin";
|
|
Group = "jallen-nas";
|
|
WorkingDirectory = "/etc/nixos";
|
|
StandardOutput = "journal+console";
|
|
StandardError = "journal+console";
|
|
Restart = "no";
|
|
# Increase timeout for large builds
|
|
TimeoutStartSec = "2h";
|
|
};
|
|
path = with pkgs; [
|
|
nix
|
|
git
|
|
uutils-coreutils
|
|
gnugrep
|
|
gnused
|
|
openssh
|
|
];
|
|
script = ''
|
|
#!/usr/bin/env bash
|
|
|
|
# Pull latest changes if in a git repo
|
|
if [ -d .git ]; then
|
|
git pull || echo "Warning: Could not pull latest changes"
|
|
fi
|
|
|
|
echo "Starting build of steamdeck at $(date)"
|
|
if nix flake update steamdeck-nixpkgs steamdeck-chaotic steamdeck-home-manager steamdeck-impermanence steamdeck-jovian steamdeck-lanzaboote steamdeck-nixos-hardware steamdeck-sops-nix steamdeck-steam-rom-manager; then
|
|
echo "steamdeck flake updated successfully at $(date)"
|
|
else
|
|
echo "steamdeck flake failed to update at $(date)"
|
|
git reset --hard
|
|
fi
|
|
if nix build .\#nixosConfigurations.steamdeck.config.system.build.toplevel --no-link; then
|
|
echo "steamdeck built successfully at $(date)"
|
|
git add .
|
|
git commit -m "Steamdeck Updates $(date)"
|
|
else
|
|
echo "steamdeck failed to build at $(date)"
|
|
git reset --hard
|
|
fi
|
|
'';
|
|
};
|
|
nix-rebuild-cache-pi4 = {
|
|
enable = true;
|
|
description = "Rebuild pi4 NixOS configurations for cache";
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
User = "admin";
|
|
Group = "jallen-nas";
|
|
WorkingDirectory = "/etc/nixos";
|
|
StandardOutput = "journal+console";
|
|
StandardError = "journal+console";
|
|
Restart = "no";
|
|
# Increase timeout for large builds
|
|
TimeoutStartSec = "2h";
|
|
};
|
|
path = with pkgs; [
|
|
nix
|
|
git
|
|
uutils-coreutils
|
|
gnugrep
|
|
gnused
|
|
openssh
|
|
];
|
|
script = ''
|
|
#!/usr/bin/env bash
|
|
|
|
# Pull latest changes if in a git repo
|
|
if [ -d .git ]; then
|
|
git pull || echo "Warning: Could not pull latest changes"
|
|
fi
|
|
|
|
echo "Starting build of pi4 at $(date)"
|
|
if nix flake update pi4-nixpkgs pi4-home-manager pi4-impermanence pi4-sops-nix pi4-nixos-hardware pi4-nixos-raspberrypi pi4-disko; then
|
|
echo "pi4 flake updated successfully at $(date)"
|
|
else
|
|
echo "pif flake failed to update at $(date)"
|
|
fi
|
|
if nix build .\#nixosConfigurations.pi4.config.system.build.toplevel --no-link --impure; then
|
|
echo "pi4 built successfully at $(date)"
|
|
git add .
|
|
git commit -m "Pi4 Updates $(date)"
|
|
else
|
|
echo "pi4 failed to build at $(date)"
|
|
git reset --hard
|
|
fi
|
|
'';
|
|
};
|
|
nix-rebuild-cache-pi5 = {
|
|
enable = true;
|
|
description = "Rebuild pi5 NixOS configurations for cache";
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
User = "admin";
|
|
Group = "jallen-nas";
|
|
WorkingDirectory = "/etc/nixos";
|
|
StandardOutput = "journal+console";
|
|
StandardError = "journal+console";
|
|
Restart = "no";
|
|
# Increase timeout for large builds
|
|
TimeoutStartSec = "2h";
|
|
};
|
|
path = with pkgs; [
|
|
nix
|
|
git
|
|
uutils-coreutils
|
|
gnugrep
|
|
gnused
|
|
openssh
|
|
];
|
|
script = ''
|
|
#!/usr/bin/env bash
|
|
|
|
# Pull latest changes if in a git repo
|
|
if [ -d .git ]; then
|
|
git pull || echo "Warning: Could not pull latest changes"
|
|
fi
|
|
|
|
echo "Starting build of pi5 at $(date)"
|
|
if nix flake update pi5-nixpkgs pi5-home-manager pi5-impermanence pi5-nixos-hardware pi5-sops-nix nixos-raspberrypi; then
|
|
echo "pi5 flake updated successfully at $(date)"
|
|
else
|
|
echo "pi5 flake failed to update at $(date)"
|
|
fi
|
|
if nix build .\#nixosConfigurations.pi5.config.system.build.toplevel --no-link; then
|
|
echo "pi5 built successfully at $(date)"
|
|
git add .
|
|
git commit -m "Pi5 Updates $(date)"
|
|
else
|
|
echo "pi5 failed to build at $(date)"
|
|
git reset --hard
|
|
fi
|
|
'';
|
|
};
|
|
nix-rebuild-cache-nas = {
|
|
enable = true;
|
|
description = "Rebuild nas NixOS configurations for cache";
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
User = "admin";
|
|
Group = "jallen-nas";
|
|
WorkingDirectory = "/etc/nixos";
|
|
StandardOutput = "journal+console";
|
|
StandardError = "journal+console";
|
|
Restart = "no";
|
|
# Increase timeout for large builds
|
|
TimeoutStartSec = "2h";
|
|
};
|
|
path = with pkgs; [
|
|
nix
|
|
git
|
|
uutils-coreutils
|
|
gnugrep
|
|
gnused
|
|
openssh
|
|
];
|
|
script = ''
|
|
#!/usr/bin/env bash
|
|
|
|
# Pull latest changes if in a git repo
|
|
if [ -d .git ]; then
|
|
git pull || echo "Warning: Could not pull latest changes"
|
|
fi
|
|
|
|
echo "Starting build of jallen-nas at $(date)"
|
|
if nix flake update nas-nixpkgs nas-authentik-nix nas-cosmic nas-crowdsec nas-home-manager nas-impermanence nas-lanzaboote nas-nixos-hardware nas-sops-nix; then
|
|
echo "jallen-nas flake updated successfully at $(date)"
|
|
else
|
|
echo "jallen-nas flake failed to update at $(date)"
|
|
fi
|
|
export NIXPKGS_ALLOW_UNFREE=1
|
|
if nix build .\#nixosConfigurations.jallen-nas.config.system.build.toplevel --no-link --impure; then
|
|
echo "jallen-nas built successfully at $(date)"
|
|
git add .
|
|
git commit -m "Jallen-NAS Updates $(date)"
|
|
else
|
|
echo "jallen-nas failed to build at $(date)"
|
|
git reset --hard
|
|
fi
|
|
'';
|
|
};
|
|
};
|
|
|
|
timers = {
|
|
nix-rebuild-cache-desktop = {
|
|
description = "Timer for rebuilding desktop NixOS configurations cache";
|
|
wantedBy = [ "timers.target" ];
|
|
timerConfig = {
|
|
OnCalendar = "weekly";
|
|
Persistent = true;
|
|
RandomizedDelaySec = "24h";
|
|
};
|
|
};
|
|
nix-rebuild-cache-steamdeck = {
|
|
description = "Timer for rebuilding steamdeck NixOS configurations cache";
|
|
wantedBy = [ "timers.target" ];
|
|
timerConfig = {
|
|
OnCalendar = "weekly";
|
|
Persistent = true;
|
|
RandomizedDelaySec = "24h";
|
|
};
|
|
};
|
|
nix-rebuild-cache-pi4 = {
|
|
description = "Timer for rebuilding pi4 NixOS configurations cache";
|
|
wantedBy = [ "timers.target" ];
|
|
timerConfig = {
|
|
OnCalendar = "weekly";
|
|
Persistent = true;
|
|
RandomizedDelaySec = "24h";
|
|
};
|
|
};
|
|
nix-rebuild-cache-pi5 = {
|
|
description = "Timer for rebuilding pi5 NixOS configurations cache";
|
|
wantedBy = [ "timers.target" ];
|
|
timerConfig = {
|
|
OnCalendar = "weekly";
|
|
Persistent = true;
|
|
RandomizedDelaySec = "24h";
|
|
};
|
|
};
|
|
nix-rebuild-cache-nas = {
|
|
description = "Timer for rebuilding nas NixOS configurations cache";
|
|
wantedBy = [ "timers.target" ];
|
|
timerConfig = {
|
|
OnCalendar = "weekly";
|
|
Persistent = true;
|
|
RandomizedDelaySec = "24h";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
nix = {
|
|
settings.builders-use-substitutes = true;
|
|
distributedBuilds = true;
|
|
buildMachines = [
|
|
{
|
|
hostName = "pi5.local";
|
|
system = "aarch64-linux";
|
|
maxJobs = 4;
|
|
sshUser = "matt";
|
|
supportedFeatures = [
|
|
"nixos-test"
|
|
"benchmark"
|
|
"big-parallel"
|
|
"kvm"
|
|
];
|
|
}
|
|
];
|
|
};
|
|
}
|