default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

let pkgs = import <nixpkgs> { };
in rec {
  utils = import ./utils.nix {
    pkgs = pkgs;
    src = pkgs.nix-gitignore.gitignoreSource [ ] ./.;
    baseName = "vps";
  };
  subtasks = rec {
    formatTerraform = utils.baseTask.overrideAttrs (baseAttrs: {
      name = "${baseAttrs.name}-format-terraform";
      buildInputs = baseAttrs.buildInputs ++ [ pkgs.terraform ];
      buildPhase = ''
        terraform fmt -check=true -diff=true || {
          echo "Terraform files are unformatted. To fix it, run:"
          echo "  terraform fmt"
          exit 1
        }
        touch $out
      '';
    });
    shellBuildInputs = with pkgs; [
      file
      gitMinimal
      git-crypt
      gettext
      terraform-providers.vultr
      terraform
      ansible
    ];
  };
  test = utils.test [
    (utils.shellcheck ".*secrets/secret-envrc.sh.*")
    (utils.fixme null)
    (utils.shellEnvironmentBuild subtasks.shellBuildInputs)
    (utils.formatNix ".*secrets/nix.*")
    subtasks.formatTerraform
  ];
  shell = utils.shellEnvironment subtasks.shellBuildInputs;
}