Something went wrong. Try again.
Tangled infrastructure definitions in Nix
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196{ description = "nix infra for tangled";
inputs = { nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11"; tangled.url = "git+https://knot1.tangled.sh/tangled.org/core"; tangled-mirror.url = "git+https://tangled.org/tangled.org/core?ref=master"; colmena.url = "github:zhaofengli/colmena/release-0.4.x"; cloudflare-ips-v4 = { url = "file+https://www.cloudflare.com/ips-v4"; flake = false; }; cloudflare-ips-v6 = { url = "file+https://www.cloudflare.com/ips-v6"; flake = false; }; disko = { url = "github:nix-community/disko"; inputs.nixpkgs.follows = "nixpkgs"; }; nixery-flake = { type = "github"; owner = "tazjin"; repo = "nixery"; flake = false; }; atlogin.url = "git+https://tangled.org/anirudh.fi/atlogin"; };
outputs = { nixpkgs, disko, colmena, cloudflare-ips-v4, cloudflare-ips-v6, nixery-flake, tangled, tangled-mirror, atlogin, ... }: let lib = nixpkgs.lib; system = "x86_64-linux"; commonArgs = import ./common/ssh.nix; cloudflareRanges = lib.filter (line: line != "") (lib.concatMap (input: lib.splitString "\n" (builtins.readFile input.outPath)) [cloudflare-ips-v4 cloudflare-ips-v6]);
baseModules = [ disko.nixosModules.disko ./common/base.nix ./common/nginx.nix ./common/tailscale.nix ];
mkHost = hostname: extraModules: lib.nixosSystem { inherit system; specialArgs = { inherit commonArgs cloudflareRanges; nixery-pkgs = import nixery-flake.outPath { pkgs = import nixpkgs {inherit system;}; }; tangled-pkgs = tangled.packages.x86_64-linux; }; modules = baseModules ++ [./hosts/${hostname}/configuration.nix] ++ extraModules; };
mkColmenaHost = hostname: targetHost: targetPort: extraModules: { deployment = { inherit targetHost targetPort; targetUser = "tangler"; buildOnTarget = true; }; nixpkgs.system = system; time.timeZone = "Europe/Helsinki"; imports = baseModules ++ [./hosts/${hostname}/configuration.nix] ++ extraModules; };
hosts = { appview = { modules = [ tangled.nixosModules.appview ./hosts/appview/services/appview.nix ./hosts/appview/services/nginx.nix ./hosts/appview/services/litestream.nix ]; target = "95.111.205.38"; port = 2222; };
pds = { modules = [ ./hosts/pds/services/nginx.nix ./hosts/pds/services/pds.nix ]; target = "tngl.sh"; };
nixery = { modules = [ tangled.nixosModules.spindle ./hosts/nixery/services/nginx.nix ./hosts/nixery/services/openbao/openbao.nix ./hosts/nixery/services/openbao/proxy.nix ./hosts/nixery/services/nixery.nix ]; target = "nixery.tangled.sh"; };
spindle = { modules = [ tangled.nixosModules.spindle ./hosts/spindle/services/openbao/openbao.nix ./hosts/spindle/services/openbao/proxy.nix ./hosts/spindle/services/spindle.nix ./hosts/spindle/services/nginx.nix ]; target = "spindle.alpha.tangled.sh"; };
spindle-hel = { modules = [ tangled.nixosModules.spindle ./hosts/spindle-hel/services/openbao/openbao.nix ./hosts/spindle-hel/services/openbao/proxy.nix ./hosts/spindle-hel/services/spindle.nix ./hosts/spindle-hel/services/cache.nix ./hosts/spindle-hel/services/nginx.nix ]; target = "135.181.240.228"; };
prometheus-hel = { modules = [ ./hosts/prometheus-hel/services/prometheus.nix ]; target = "62.238.19.177"; };
knot1 = { modules = [ tangled.nixosModules.knot-rs ./hosts/knot1/services/knot2.nix ./hosts/knot1/services/nginx.nix ./hosts/knot1/services/ssh.nix ]; target = "85.9.211.103"; port = 2222; };
mirror = { modules = [ tangled-mirror.nixosModules.knotmirror tangled-mirror.nixosModules.zoekt-tnglserver atlogin.nixosModules.default ./hosts/mirror/services/knotmirror.nix ./hosts/mirror/services/nginx.nix ./hosts/mirror/services/atlogin.nix ./hosts/mirror/services/zoekt.nix ]; target = "81.27.110.122"; }; }; in { nixosConfigurations = lib.mapAttrs (name: host: mkHost name host.modules) hosts;
colmenaHive = colmena.lib.makeHive ( { meta = { nixpkgs = nixpkgs.legacyPackages.${system}; specialArgs = { inherit commonArgs cloudflareRanges; nixery-pkgs = import nixery-flake.outPath { pkgs = import nixpkgs {inherit system;}; }; tangled-pkgs = tangled.packages.x86_64-linux; }; }; } // lib.mapAttrs (name: host: mkColmenaHost name host.target (host.port or 22) host.modules) hosts ); formatter = let supportedSystems = ["x86_64-linux" "x86_64-darwin" "aarch64-linux" "aarch64-darwin"]; forAllSystems = nixpkgs.lib.genAttrs supportedSystems; nixpkgsFor = forAllSystems (system: nixpkgs.legacyPackages.${system}); in forAllSystems (system: nixpkgsFor."${system}".alejandra); };}