snowfield/lib/default.nix

inputs: final: prev:

with builtins;

let
  overlay-unstable = arch: final: prev:
    let
      nixpkgs-patched-src = (import inputs.nixpkgs { system = arch; }).applyPatches {
        name = "nixpkgs-patches";
        src = inputs.nixpkgs;
        patches = [ ../patches/bcachefs-systemd-stage-1.patch ];
      };
    in
    {
      unstable = inputs.unstable.legacyPackages."${arch}";
      nixpkgs-patched = import nixpkgs-patched-src { system = arch; };
      stable = inputs.nixpkgs.legacyPackages."${arch}";
    };
in
{

  mkMachine = { host, host-config, modules, nixpkgs ? inputs.nixpkgs, system ? "x86_64-linux", home-manager ? inputs.home-manager }:
    let
      nixpkgs-patched-src = (import nixpkgs { inherit system; }).applyPatches {
        name = "nixpkgs-patched";
        src = nixpkgs;
        patches = [ ../patches/bcachefs-systemd-stage-1.patch ];
      };
    in
    nixpkgs.lib.nixosSystem {
      lib = final;
      system = system;
      specialArgs = {
        inherit inputs;
        nixpkgs-patched = nixpkgs-patched-src;
      };
      modules = builtins.attrValues modules ++ [
        ../machines/base.nix
        inputs.sops-nix.nixosModules.sops
        host-config
        home-manager.nixosModules.home-manager
        inputs.simple-nixos-mailserver.nixosModule
        inputs.hyprland.nixosModules.default
        inputs.attic.nixosModules.atticd
        inputs.lanzaboote.nixosModules.lanzaboote
        inputs.nix-index-database.nixosModules.nix-index
        {
          home-manager.useGlobalPkgs = true;
          nixpkgs.overlays = [
            (overlay-unstable system)
            (final: prev:
              {
                hyprland = inputs.hyprland.packages.${system}.default.override {
                  enableXWayland = true;
                  nvidiaPatches = false;
                  legacyRenderer = true;
                };
                waybar = prev.waybar.overrideAttrs (oldAttrs: {
                  mesonFlags = oldAttrs.mesonFlags ++ [ "-Dexperimental=true" ];
                });
                tinystatus = prev.pkgs.callPackage ../packages/tinystatus { };
                jackett = prev.unstable.jackett;
                radarr = prev.unstable.radarr;
                htpdate = prev.pkgs.callPackage ../packages/htpdate { };
                authelia = prev.pkgs.callPackage ../packages/authelia { };
                paperless-ng = prev.pkgs.callPackage ../packages/paperless-ng { };
                tailscale = prev.unstable.tailscale;
                nodePackages = prev.unstable.nodePackages;
                hydrasect = prev.pkgs.callPackage ../packages/hydrasect { };
                linkal = inputs.linkal.defaultPackage."${system}";
                mosh = prev.unstable.mosh;
                hyprpaper = inputs.hyprpaper.packages.${system}.default;
                attic = inputs.attic.packages.${system}.default;
                colmena = inputs.colmena.packages.${system}.colmena;
                nixd = inputs.nixd.packages.${system}.default;
                keycloak-keywind = prev.pkgs.callPackage ../packages/keycloak-keywind { };
                nix-rfc-92 = inputs.nix-rfc-92.packages.${system}.default;
              })
          ];
        }
      ];
      extraModules = [ inputs.colmena.nixosModules.deploymentOptions ];
    };

  importConfig = path: (mapAttrs (name: value: import (path + "/${name}/default.nix")) (final.filterAttrs (_: v: v == "directory") (readDir path)));

  mkSubdomain = name: port: {
    luj.nginx.enable = true;
    services.nginx.virtualHosts."${name}.julienmalka.me" = {
      enableACME = true;
      forceSSL = true;
      locations."/" = {
        proxyPass = "http://localhost:${toString port}";
      };
    };
  };

  mkVPNSubdomain = name: port: {
    luj.nginx.enable = true;
    security.acme.certs."${name}.luj".server = "https://ca.luj/acme/acme/directory";
    services.nginx.virtualHosts."${name}.luj" = {
      forceSSL = true;
      enableACME = true;
      locations."/" = {
        proxyPass = "http://localhost:${toString port}";
        extraConfig = ''
          allow 100.100.45.0/24;
          allow fd7a:115c:a1e0::/48;
          deny all;
        '';
      };
    };
  };




  luj = import ./luj.nix inputs final;

}