flake.nix

@@ -20,14 +20,16 @@
       system = "x86_64-linux";
       pkgs = nixpkgs.legacyPackages.${system};
       pkgs-unstable = nixpkgs-unstable.legacyPackages.${system};
-      machines = {
+      machines = import ./machines;
-        jefke = {
+      mkNixosSystems = systemDef:
-          name = "jefke";
+        nixpkgs.lib.foldlAttrs (acc: name: machine:
-          hostname = "jefke.hyp";
+          acc // {
-          user-cert = builtins.readFile ./jefke_user_ed25519-cert.pub;
+            "${name}" = nixpkgs.lib.nixosSystem (systemDef machine);
-          host-cert = builtins.readFile ./jefke_host_ed25519-cert.pub;
+          }) { } machines;
-        };
+      mkDeployNodes = nodeDef:
-      };
+        nixpkgs.lib.foldlAttrs
+        (acc: name: machine: acc // { "${name}" = nodeDef machine; }) { }
+        machines;
     in {
       devShells.${system}.default = pkgs.mkShell {
         packages = [
@@ -40,10 +42,7 @@
       # TODO. if uncommented, nix flake check fails
       # formatter = pkgs.nixfmt;
 
-      # TODO create helper
+      nixosConfigurations = mkNixosSystems (machine: {
-      nixosConfigurations = nixpkgs.lib.foldlAttrs (acc: name: machine:
-        acc // {
-          "${name}" = nixpkgs.lib.nixosSystem {
         inherit system;
         specialArgs = { inherit machine; };
         modules = [
@@ -51,24 +50,19 @@
           agenix.nixosModules.default
           ./configuration.nix
         ];
-          };
+      });
-        }) { } machines;
 
       deploy = {
         sshUser = "root";
         user = "root";
 
-        # TODO create helper
+        nodes = mkDeployNodes (machine: {
-        nodes = nixpkgs.lib.foldlAttrs (acc: name: machine:
-          acc // {
-            "${name}" = {
           hostname = machine.hostname;
           profiles.hypervisor = {
             path = deploy-rs.lib.${system}.activate.nixos
-                  self.nixosConfigurations.${name};
+              self.nixosConfigurations.${machine.name};
           };
-            };
+        });
-          }) { } machines;
       };
 
       checks = builtins.mapAttrs

machines/default.nix

@@ -0,0 +1,8 @@
+{
+  jefke = {
+    name = "jefke";
+    hostname = "jefke.hyp";
+    user-cert = builtins.readFile ./jefke_user_ed25519-cert.pub;
+    host-cert = builtins.readFile ./jefke_host_ed25519-cert.pub;
+  };
+}