kyouma-net/flake.nix

{
  description = "kyouma.net website";

  inputs.nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
  inputs.flake-utils.url = "github:numtide/flake-utils";

  outputs = { self, nixpkgs, flake-utils }:
    flake-utils.lib.eachDefaultSystem (system: let
      pkgs = nixpkgs.legacyPackages.${system};
    in rec {
      packages.vid = pkgs.stdenv.mkDerivation {
        name = "kyouma-www-vid";
        src = ./.;
        buildInputs = [ pkgs.yt-dlp ];
        buildPhase = ''
          yt-dlp -f 136+251 C4oApBlw7Gc --merge-output-format mp4 -o "media/sunnyday-avc.mp4"
          yt-dlp -f 398+251 C4oApBlw7Gc --merge-output-format mp4 -o "media/sunnyday-av1.mp4"
        '';
        installPhase = ''cp -r media $out'';
        outputHashMode = "recursive";
        outputHashAlgo = "sha256";
        outputHash = "abrls86wyBJaZN3QM/p8fRoGQ7jVseao3F4oiMPh+84=";
      };
      packages.kyouma-www = pkgs.stdenv.mkDerivation {
        pname = "kyouma-www";
        version = self.shortRev or (toString self.lastModifiedDate); 
        src = ./.;
        buildPhase = '''';
        installPhase = ''cp -r src $out'';
      };
      packages.default = packages.kyouma-www;
      nixosModules.default = 
        { config, options, pkgs, ... }: with lib; 
        let 
          cfg = config.services.vyosBld;
          bldFlags = (attrsets.mapAttrsToList (flag: opt: "--" + flag + " " + opt) cfg.buildFlags);
        in {
          options.services.vyosBld = {
            enable = mkEnableOption "VyOS automatic build";

            output = mkOption {
              type = types.str;
              default = null;
              description = "Where the iso should be copied";
            };

            keep = mkOption {
              type = types.number;
              default = 5;
              description = "Amount of versions to keep";
            };

            buildFreq = mkOption {
              type = types.str;
              default = "*-*-* 4:20:00";
              description = "How often a new Image should be build. See {manpage}`systemd.timer(5)`";
            };

            flavor = mkOption {
              type = types.str;
              default = "iso";
              description = "See VyOS build docs";
            };

            buildFlags = mkOption {
              type = types.attrs;
              default = "";
              description = "Build Flags see https://docs.vyos.io/en/latest/contributing/build-vyos.html
                example:
                { build-by = 'mail@server.tld' }";
            };
          };
          config = with lib; mkIf cfg.enable rec {
            bldScript = writeShellScrip "build-vyos" ''
              cleanup() {
                rmdir "$root"
              }
              root="$(mktemp -d)"
              trap cleanup EXIT
              iso_name="vyos-${cfg.buildFlags.version}-${cfg.buildFlags.architecture}.iso"
              bld_dir="$root/vyos-build"

              git clone -b current --single-branch https://github.com/vyos/vyos-build $root
              docker run --rm -it --privileged -v $bld_dir:/vyos -w /vyos vyos/vyos-build:current /usr/bin/sudo ./build-vyos-image ${flavor} ${builtins.concatStringsSep " " bldFlags}
              docker run --rm -it --privileged -v $bld_dir:/vyos -w /vyos vyos/vyos-build:current sudo chown -R ${config.users.users.vyos-bld.uid}:${config.users.groups.vyos-bld.uid}

              cp $bld_dir/build/$iso_name ${cfg.output}
              mapfile -t old_isos < <(ls ${cfg.output} | head -n -${cfg.keep})
              for i in $\{old_isos[@]}; do
                rm -r ${cfg.output}/$\{old_iso[$i]}
              done
            '';

            virtualisation.docker.rootless = {
              enable = true;
              setSocketVariable = true;
            };
            
            systemd.services.vyosBld = {
              wantedBy = [ "multi-user.target" ];
              serviceConfig = {
                ExecStart = "${pkgs.nix-shell} ${bldScript} -p docker git"
                Type = "onshot";
              };
            };
            systemd.timer.vyosBld-time = {
              wantedBy = [ "timers.target" ];
              timerConfig = {
                Unit = "vyosBld.service";
                OnCalendar = cfg.buildFreq;
              };
            };
          };
        };
      ;
    });
}