infra/flake.nix

{
  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs/nixos-23.05";
    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixpkgs-unstable";

    flake-utils.url = "github:numtide/flake-utils";
    flake-parts.url = "github:hercules-ci/flake-parts";

    agenix = {
      url = "github:ryantm/agenix";
      inputs.darwin.follows = "";
      inputs.home-manager.follows = "";
    };
    valheim-server = {
      url = "github:aidalgol/valheim-server-flake";
      inputs.flake-utils.follows = "flake-utils";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    nixinate = {
      url = "github:matthewcroughan/nixinate";
      inputs.nixpkgs.follows = "nixpkgs";
    };
    pre-commit-hooks = {
      url = "github:cachix/pre-commit-hooks.nix";
      inputs.flake-utils.follows = "flake-utils";
    };

    attic.url = "github:zhaofengli/attic";
    sanctureplicum-nur.url = "git+https://gitea.pid1.sh/sanctureplicum/nur.git";
  };

  nixConfig = {
    extra-trusted-substituters = [
      "https://cache.garnix.io"
      "https://sanctureplicum.cachix.org"
      "https://staging.attic.rs/attic-ci"
    ];
    extra-trusted-public-keys = [
      "attic-ci:U5Sey4mUxwBXM3iFapmP0/ogODXywKLRNgRPQpEXxbo="
      "sanctureplicum.cachix.org-1:VztHStNqXs5pFZ0eNVoIfoqCaeKdNKRqkbNb8lYrqQ8="
      "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
    ];
  };

  outputs = {flake-parts, ...} @ inputs: let
    overlays = final: prev: {
      gitea-nyx = inputs.sanctureplicum-nur.packages.${prev.system}.gitea-nyx;
      unstable = inputs.nixpkgs-unstable.legacyPackages.${prev.system};
    };
  in
    flake-parts.lib.mkFlake {inherit inputs;} {
      flake = {
        nixosConfigurations.main-node = inputs.nixpkgs.lib.nixosSystem {
          system = "x86_64-linux";
          modules = [
            {
              _module.args.nixinate = {
                host = "main-node";
                buildOn = "remote";
                hermetic = false;
              };
              nixpkgs = {
                config.allowUnfree = true;
                overlays = [overlays];
              };
            }
            ./hosts/main-node
            ./config
            inputs.attic.nixosModules.atticd
            inputs.agenix.nixosModules.default
            inputs.valheim-server.nixosModules.default
          ];
        };
      };

      perSystem = {
        pkgs,
        system,
        self',
        ...
      }: {
        apps = (inputs.nixinate.nixinate.${system} inputs.self).nixinate;

        checks.pre-commit-check = inputs.pre-commit-hooks.lib.${system}.run {
          src = ./.;
          hooks = {
            alejandra.enable = true;
            nil.enable = true;
          };
        };

        devShells.default = pkgs.mkShell {
          buildInputs = [inputs.agenix.packages.${system}.agenix];
          inherit (inputs.self.checks.${system}.pre-commit-check) shellHook;
        };

        formatter = pkgs.alejandra;
      };

      systems = ["x86_64-linux" "aarch64-linux" "aarch64-darwin" "x86_64-darwin"];
    };
}