flake.nix

@@ -20,14 +20,16 @@
       system = "x86_64-linux";
       pkgs = nixpkgs.legacyPackages.${system};
       pkgs-unstable = nixpkgs-unstable.legacyPackages.${system};
-      machines = {
+      machines = import ./machines;
-        jefke = {
+      mkNixosSystems = systemDef:
-          name = "jefke";
+        nixpkgs.lib.foldlAttrs (acc: name: machine:
-          hostname = "jefke.hyp";
+          acc // {
-          user-cert = builtins.readFile ./jefke_user_ed25519-cert.pub;
+            "${name}" = nixpkgs.lib.nixosSystem (systemDef machine);
-          host-cert = builtins.readFile ./jefke_host_ed25519-cert.pub;
+          }) { } machines;
-        };
+      mkDeployNodes = nodeDef:
-      };
+        nixpkgs.lib.foldlAttrs
+        (acc: name: machine: acc // { "${name}" = nodeDef machine; }) { }
+        machines;
     in {
       devShells.${system}.default = pkgs.mkShell {
         packages = [
@@ -40,35 +42,27 @@
       # TODO. if uncommented, nix flake check fails
       # formatter = pkgs.nixfmt;
 
-      # TODO create helper
+      nixosConfigurations = mkNixosSystems (machine: {
-      nixosConfigurations = nixpkgs.lib.foldlAttrs (acc: name: machine:
+        inherit system;
-        acc // {
+        specialArgs = { inherit machine; };
-          "${name}" = nixpkgs.lib.nixosSystem {
+        modules = [
-            inherit system;
+          disko.nixosModules.disko
-            specialArgs = { inherit machine; };
+          agenix.nixosModules.default
-            modules = [
+          ./configuration.nix
-              disko.nixosModules.disko
+        ];
-              agenix.nixosModules.default
+      });
-              ./configuration.nix
-            ];
-          };
-        }) { } machines;
 
       deploy = {
         sshUser = "root";
         user = "root";
 
-        # TODO create helper
+        nodes = mkDeployNodes (machine: {
-        nodes = nixpkgs.lib.foldlAttrs (acc: name: machine:
+          hostname = machine.hostname;
-          acc // {
+          profiles.hypervisor = {
-            "${name}" = {
+            path = deploy-rs.lib.${system}.activate.nixos
-              hostname = machine.hostname;
+              self.nixosConfigurations.${machine.name};
-              profiles.hypervisor = {
+          };
-                path = deploy-rs.lib.${system}.activate.nixos
+        });
-                  self.nixosConfigurations.${name};
-              };
-            };
-          }) { } machines;
       };
 
       checks = builtins.mapAttrs

machines/default.nix

@@ -0,0 +1,8 @@
+{
+  jefke = {
+    name = "jefke";
+    hostname = "jefke.hyp";
+    user-cert = builtins.readFile ./jefke_user_ed25519-cert.pub;
+    host-cert = builtins.readFile ./jefke_host_ed25519-cert.pub;
+  };
+}