add flake check, move modules into machines folder

.github/workflows/main.yml

@@ -1,4 +1,4 @@
-name: Build Images
+name: Main
 
 permissions:
   contents: read
@@ -18,6 +18,21 @@ env:
   REGISTRY_IMAGE: "ghcr.io/cottand/selfhosted"
 
 jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v22
+        with:
+          github_access_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - name: Flake check
+        run: |
+          nix check .
+
   build-images:
     runs-on: ubuntu-latest
     steps:

hive.nix

@@ -25,7 +25,7 @@ in
     imports = [
       ./machines/${name}/definition.nix
       ./machines/_default
-      ./modules
+      ./machines/modules
       home-manager.nixosModules.home-manager
       cottand.nixosModules.seaweedBinaryCache
       cottand.nixosModules.dcottaRootCa

scripts/all-images/default.nix

@@ -1,3 +1,13 @@
+# For every image to be built in CI,
+# this produces a JSON-formatted file like:
+#
+#  {
+#    <name1>: <image_targz_1>,
+#    <name2>: <image_targz_2>,
+#    ...etc
+#  }
+#
+# You can build and cat this file to build all images.
 { self, writeText, system, ... }:
 let
   services = self.legacyPackages.${system}.services;

scripts/default.nix

@@ -1,11 +1,9 @@
 { self, callPackage, nomad, jq, nix, bws, writeShellScriptBin, writeScriptBin, yaegi, ... }: rec {
 
-  #    buildAllImages = callPackage (import ./buildAllImages) {};
-
-  buildYaegiScript = name: filePath: writeScriptBin name ''
-    #! ${yaegi}/bin/yaegi
-    ${builtins.readFile filePath}
-  '';
+#  buildYaegiScript = name: filePath: writeScriptBin name ''
+#    #! ${yaegi}/bin/yaegi
+#    ${builtins.readFile filePath}
+#  '';
 
   # templates a nomad nix file into JSON and calls nomad run on it
   # usage: nixmad path/to/job.nix
@@ -30,5 +28,5 @@
     ${jq}/bin/jq -n --arg value "$SECRET" '{ "value": $value }'
   '';
 
-  all-images = callPackage (import ./all-images) { inherit self; };
+  all-images = callPackage ./all-images { inherit self; };
 }

services/default.nix

@@ -1,3 +1,8 @@
+# Collection of services used in this repo.
+#
+# The source code does not need to live here, but every attribute of this set must return
+# the built binary and that itself has to have an extra `.image` attribute, which is
+# the OCI image to be built and run.
 { callPackage, writeText, ... }: {
   s-portfolio-stats = callPackage (import ./s-portfolio-stats) { };
 }