nixos-config/flake.nix

{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-22.11";
    private.url = "git+ssh://git@git.tempest.dev/ashe/nixos-config-private";
    tmpfiles.url = "git+http://git.tempest.dev/ashe/tmpfiles?ref=refs/tags/v0.1.0";
    tempestdev.url = "git+http://git.tempest.dev/ashe/tempest.dev?ref=refs/tags/v3.1.0";
  };

  outputs = { self, nixpkgs, private, tmpfiles, tempestdev }: {
    nixosConfigurations = {

      nyx = nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = [
          ./hosts/nyx/configuration.nix
          private.nixosModules.nyx

          tmpfiles.nixosModule
          tempestdev.nixosModule
          ({ pkgs, ...}: {
            networking.firewall.allowedTCPPorts = [ 80 443 ];

            services.nginx.enable = true;
            security.acme.acceptTerms = true;
            security.acme.defaults.email = "acme@tempest.dev";

            ashe.services.tmpfiles.enable = true;
            ashe.services.tmpfiles.domain = "files.tempest.dev";
            ashe.services.tmpfiles.port = 4441;

            ashe.services."tempest.dev".enable = true;
            ashe.services."tempest.dev".domain = "test.tempest.dev";
            ashe.services."tempest.dev".port = 4442;
          })
        ];
      };

    };
  };
}