evilfactorylabs · r17x · Nov 6, 2024 · Nov 7, 2024 · Nov 7, 2024 · Nov 8, 2024
diff --git a/.envrc.example b/.envrc.example
@@ -1,4 +1,4 @@
-use_nix
+use flake
 
 export TF_VAR_do_token=
 export TF_VAR_linode_token=

diff --git a/.gitattributes b/.gitattributes
@@ -0,0 +1 @@
+secrets/*.yaml diff=sopsdiffer
diff --git a/.gitignore b/.gitignore
@@ -10,3 +10,7 @@ terraform.tfstate.*
 .direnv
 
 # End of https://www.toptal.com/developers/gitignore/api/direnv
+
+.pre-commit-config.yaml
+
+result
diff --git a/.sops.yaml b/.sops.yaml
@@ -0,0 +1,11 @@
+keys:
+  - &r17x B0B63B776767DFAA669D06715CA1E57AFBF76F90
+  - &komunix-dev age13rrpdnr7f9knpgdvafvjkp74ejacuhcvzhdw2j8h5xjwyrmrhv4s4tvr8j
+creation_rules:
+  - path_regex: secrets/(?:[^/]+/)*[^/]+\.(yaml|json|env|ini)$
+    key_groups:
+    - pgp:
+        - *r17x
+      age:
+        - *komunix-dev
+
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -0,0 +1,37 @@
+{
+  description = "area13";
+
+  outputs =
+    inputs@{ flake-parts, pre-commit-hooks, ... }:
+    flake-parts.lib.mkFlake { inherit inputs; } {
+      systems = [
+        "aarch64-darwin"
+        "aarch64-linux"
+        "x86_64-linux"
+      ];
+
+      imports = [
+        pre-commit-hooks.flakeModule
+        ./nix
+      ];
+    };
+
+  inputs = {
+    # utilities for Flake
+    flake-parts.url = "github:hercules-ci/flake-parts";
+
+    ## -- nixpkgs 
+    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+    nixpkgs-stable.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+    nixpkgs.follows = "nixpkgs-unstable";
+
+    # secret management 
+    sops.url = "github:Mic92/sops-nix";
+    sops.inputs.nixpkgs.follows = "nixpkgs";
+    sops.inputs.nixpkgs-stable.follows = "nixpkgs-stable";
+
+    # utilities
+    pre-commit-hooks.url = "github:cachix/pre-commit-hooks.nix";
+    pre-commit-hooks.inputs.nixpkgs.follows = "nixpkgs";
+  };
+}
diff --git a/nix/cache.html.tpl b/nix/cache.html.tpl
@@ -0,0 +1,94 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta http-equiv="X-UA-Compatible" content="ie=edge">
+    <title>cache.komunix.org (di raspi) - UP</title>
+  </head>
+  <body>
+<pre>
+
+
+
+
+
+
+
+
+
+
+
+
+
+                                                                     __                  __
+                                                                    /\ \                /\ \                                          __
+                                                 ___     __      ___\ \ \___      __    \ \ \/'\     ___     ___ ___   __  __    ___ /\_\   __  _       ___   _ __    __
+                                                /'___\ /'__`\   /'___\ \  _ `\  /'__`\   \ \ , <    / __`\ /' __` __`\/\ \/\ \ /' _ `\/\ \ /\ \/'\     / __`\/\`'__\/'_ `\
+                                                /\ \__//\ \L\.\_/\ \__/\ \ \ \ \/\  __/  __\ \ \\`\ /\ \L\ \/\ \/\ \/\ \ \ \_\ \/\ \/\ \ \ \\/>   /  __/\ \L\ \ \ \//\ \L\ \
+                                                \ \____\ \__/.\_\ \____\\ \_\ \_\ \____\/\_\\ \_\ \_\ \____/\ \_\ \_\ \_\ \____/\ \_\ \_\ \_\/\_/\_\/\_\ \____/\ \_\\ \____ \
+                                                \/____/\/__/\/_/\/____/ \/_/\/_/\/____/\/_/ \/_/\/_/\/___/  \/_/\/_/\/_/\/___/  \/_/\/_/\/_/\//\/_/\/_/\/___/  \/_/ \/___L\ \
+                                                                                                                                                   /\____/
+                                                                                                                                                   \_/__/
+
+                                                                                        <b>/nix/store milik bersama</b> | <b>[email protected]</b>
+
+
+
+
+
+                > NixOS
+
+                # /etc/nixos/configuration.nix
+
+                { nix.settings.substituters = [ https://cache.komunix.org/ ]; }
+
+                > GNU/Linux
+
+                # /etc/nix/nix.conf
+
+                fallback = true
+                binary-caches = https://cache.komunix.org/ https://cache.nixos.org/
+
+                # OR
+
+                fallback = true
+                substituters = https://cache.komunix.org
+
+
+                > Mac OS
+
+                # $HOME/.nixpkgs/darwin-configuration.nix
+
+                nix.settings.substituters = pkgs.lib.mkBefore [ "https://cache.komunix.org/" ];
+
+                > Flake
+
+                nix.settings.experimental-features = [ "nix-command" "flakes" ];
+                nix.settings.trusted-substituters = [ "https://cache.komunix.org" ];
+
+                # Recomendation
+                nix.settings.fallback = true;
+
+
+                enjoy :^)
+
+                ---
+
+                # stats for nerds
+
+                $> find /home/komunix/nfs/nix-cache -type f | wc -l
+
+                $TOTAL_CACHE
+
+                $> du -sh /home/komunix/nfs/nix-cache; echo; df -h /home/komunix/nfs/nix-cache; echo; date +%s
+
+                $NICE
+
+                Filesystem                      Size  Used Avail Use% Mounted on
+                $USAGE
+
+                $TIMESTAMP
+</pre>
+  </body>
+</html>