Merge branch 'deploy-rs'

README.md

@@ -1,10 +1,11 @@
 # mhnet NixOS configurations
 
-Usage: `./deploy.sh HOST`
+Usage: `deploy`
 
 
 ## Backlog
 
+- [ ] Manage secret data with `agenix`
 - [ ] https://xeiaso.net/blog/paranoid-nixos-2021-07-18/
 - [ ] https://xeiaso.net/blog/paranoid-nixos-aws-2021-08-11/
 

flake.nix

@@ -1,19 +1,44 @@
 {
-  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+  description = "Deployment for my server(s)";
 
-  outputs = { self, nixpkgs }:
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+    deploy-rs = {
+      url = "github:serokell/deploy-rs";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+  };
+
+  outputs = { self, nixpkgs, deploy-rs }:
     let
       system = "x86_64-linux";
       pkgs = nixpkgs.legacyPackages.${system};
     in
     {
-      devShell."${system}" = pkgs.mkShell {
-        packages = with pkgs; [ nixos-rebuild ];
+      # Ensure necessary tooling is available
+      devShells."${system}".default = pkgs.mkShell {
+        packages = [ pkgs.deploy-rs ];
       };
 
+      # NixOS configurations
       nixosConfigurations.rhea = nixpkgs.lib.nixosSystem {
-        inherit system;
+        system = "x86_64-linux ";
         modules = [ ./configuration.nix ];
       };
+
+      # Deployment specifications
+      deploy.nodes.rhea = {
+        hostname = "rhea";
+        sshUser = "root";
+        remoteBuild = true;
+
+        profiles.system = {
+          path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.rhea;
+        };
+      };
+
+      # FIXME: reenable; will pull a gig of dependencies ...
+      # checks = builtins.mapAttrs (system: deployLib: deployLib.deployChecks self.deploy) deploy-rs.lib;
     };
 }
+