flake.nix

{
  description = "The Hive - VoD systems";
  # Cachix
  nixConfig.extra-substituters = [
    "https://njk.cachix.org"
    "https://cache.garnix.io"
  ];

  nixConfig.extra-trusted-public-keys = [
    "njk.cachix.org-1:ON4lemYq096ZfK5MtL1NU3afFk9ILAsEnXdy5lDDgKs="
    "cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g="
  ];

  # nixConfig.extra-access-tokens = ["github.com=github_pat_XYZ"];

  # common for deduplication
  inputs = {
    flake-compat.url = "github:edolstra/flake-compat";
    flake-utils.url = "github:numtide/flake-utils";
    nixpkgs-lib.url = "github:nix-community/nixpkgs.lib";
    bird-nix-lib.url = "github:spikespaz/bird-nix-lib";

    flake-schemas.url = "github:DeterminateSystems/flake-schemas";
  };

  # hive / std
  inputs = {
    devshell.url = "github:numtide/devshell";
    devshell.inputs.nixpkgs.follows = "nixpkgs-unstable";

    n2c.url = "github:nlewo/nix2container";
    n2c.inputs.nixpkgs.follows = "nixpkgs-unstable";
    n2c.inputs.flake-utils.follows = "flake-utils";

    makes.url = "github:fluidattacks/makes/24.01";
    makes.inputs.nixpkgs.follows = "nixpkgs-lib";

    paisano.url = "github:paisano-nix/core";
    paisano.inputs.nixpkgs.follows = "nixpkgs-unstable";
    paisano.inputs.yants.follows = "yants";

    incl.url = "github:divnix/incl";
    incl.inputs.nixlib.follows = "nixpkgs-lib";

    dmerge.url = "github:divnix/dmerge/0.2.1";
    dmerge.inputs.haumea.follows = "haumea";
    dmerge.inputs.yants.follows = "yants";
    dmerge.inputs.nixlib.follows = "nixpkgs-lib";

    haumea.url = "github:nix-community/haumea/v0.2.2";
    haumea.inputs.nixpkgs.follows = "nixpkgs-lib";

    yants.url = "github:divnix/yants";
    yants.inputs.nixpkgs.follows = "nixpkgs-lib";

    # BUG: https://github.com/zhaofengli/colmena/issues/202
    colmena.url = "github:zhaofengli/colmena";
    colmena.inputs.nixpkgs.follows = "nixpkgs-unstable";
    colmena.inputs.flake-utils.follows = "flake-utils";

    nixago.url = "github:nix-community/nixago";
    nixago.inputs.nixpkgs.follows = "nixpkgs-unstable";
    nixago.inputs.flake-utils.follows = "flake-utils";
    nixago.inputs.nixago-exts.follows = "nixago-exts";

    nixago-exts.url = "github:nix-community/nixago-extensions";
    nixago-exts.inputs.nixpkgs.follows = "nixpkgs-unstable";
    nixago-exts.inputs.flake-utils.follows = "flake-utils";
    nixago-exts.inputs.nixago.follows = "nixago";

    terranix.url = "github:terranix/terranix/2.7.0";
    terranix.inputs.nixpkgs.follows = "nixpkgs-unstable";
    terranix.inputs.flake-utils.follows = "flake-utils";

    disko.url = "github:nix-community/disko";
    disko.inputs.nixpkgs.follows = "nixpkgs-unstable";

    microvm.url = "github:astro/microvm.nix";
    microvm.inputs.nixpkgs.follows = "nixpkgs-unstable";

    arion.url = "github:hercules-ci/arion";
    arion.inputs.nixpkgs.follows = "nixpkgs-unstable";

    # std.url = "github:divnix/std/v0.33.1";
    std.url = "github:divnix/std/v0.33.3";
    std.inputs.nixpkgs.follows = "nixpkgs-unstable";
    std.inputs.n2c.follows = "n2c";
    std.inputs.devshell.follows = "devshell";
    std.inputs.nixago.follows = "nixago";
    std.inputs.terranix.follows = "terranix";
    std.inputs.microvm.follows = "microvm";
    std.inputs.makes.follows = "makes";
    std.inputs.arion.follows = "arion";
    std.inputs.lib.follows = "nixpkgs-lib";
    std.inputs.paisano.follows = "paisano";
    std.inputs.dmerge.follows = "dmerge";
    std.inputs.haumea.follows = "haumea";
    std.inputs.incl.follows = "incl";

    hive.url = "github:divnix/hive";
    hive.inputs.std.follows = "std";
    hive.inputs.devshell.follows = "devshell";
    hive.inputs.paisano.follows = "paisano";
    hive.inputs.colmena.follows = "colmena";
    hive.inputs.nixago.follows = "nixago";
    hive.inputs.nixpkgs.follows = "nixpkgs-unstable";
  };

  # system tools
  # TODO: inputs.nix-topology.url = "github:oddlama/nix-topology";
  inputs = {
    nix-super.url = "github:privatevoid-net/nix-super";

    nix-filter.url = "github:numtide/nix-filter";

    nixos-generators.url = "github:nix-community/nixos-generators";
    nixos-generators.inputs.nixpkgs.follows = "nixpkgs-unstable";
    nixos-generators.inputs.nixlib.follows = "nixpkgs-lib";

    nixos-anywhere.url = "github:nix-community/nixos-anywhere/1.1.1";
    nixos-anywhere.inputs.nixpkgs.follows = "nixpkgs-unstable";
    nixos-anywhere.inputs.disko.follows = "disko";

    nixos-hardware.url = "github:nixos/nixos-hardware";

    impermanence.url = "github:nix-community/impermanence";

    sops-nix.url = "github:Mic92/sops-nix";
    sops-nix.inputs.nixpkgs.follows = "nixpkgs-unstable";
    sops-nix.inputs.nixpkgs-stable.follows = "nixos";

    # NOTE: ssh root@host "cat /etc/ssh/ssh_host_rsa_key" | ssh-to-pgp -o nixos/secrets/keys/host.asc
    sops-ssh-to-pgp.url = "github:Mic92/ssh-to-pgp/1.1.2";
    sops-ssh-to-pgp.inputs.nixpkgs.follows = "nixpkgs-unstable";

    sops-ssh-to-age.url = "github:Mic92/ssh-to-age/1.1.6";
    sops-ssh-to-age.inputs.nixpkgs.follows = "nixpkgs-unstable";

    devos-ext-lib.url = "github:divnix/devos-ext-lib/?ref=refs/pull/8/head";
    devos-ext-lib.inputs.nixpkgs.follows = "nixpkgs-unstable";
  };

  # nixpkgs & home-manager
  inputs = {
    nixpkgs-unstable.url = "github:nixos/nixpkgs/nixpkgs-unstable";
    nixpkgs-master.url = "github:nixos/nixpkgs";
    latest.follows = "nixpkgs-unstable";
    nixos.follows = "nixos-24-05";
    nixpkgs.follows = "nixos-24-05";

    home.url = "github:nix-community/home-manager/release-23.11";
    home.inputs.nixpkgs.follows = "nixos";

    home-unstable.url = "github:nix-community/home-manager";
    home-unstable.inputs.nixpkgs.follows = "nixpkgs-unstable";

    srvos.url = "github:nix-community/srvos";
    srvos.inputs.nixpkgs.follows = "nixpkgs-unstable";

    # Nix flake for "too much bleeding-edge" and unreleased packages
    # nyx.url = "github:chaotic-cx/nyx";
  };

  # Compat nixpkgs
  inputs = {
    # NOTE: nixpkgs-pycrypto-pinned is pinned for gpg-hd package, never upgrade!
    # https://github.com/Logicwax/gpg-hd/issues/3 - is the reason.
    # nixpkgs-pycrypto-pinned.url = "github:nixos/nixpkgs/e1d501922fd7351da4200e1275dfcf5faaad1220";
    # nixpkgs-linux-firmware.url = "github:nixos/nixpkgs/07f2b4bebf1a457d4e709ad20b3c53aa55a960e7";
    # nixos-unstable-linux_6_2.url = "github:nixos/nixpkgs/63464b8c2837ec56e1d610f5bd2a9b8e1f532c07";
    # nixos-unstable-linux_6_5.url = "github:nixos/nixpkgs/b644d97bda6dae837d577e28383c10aa51e5e2d2";
    nixos-22-11.url = "github:nixos/nixpkgs/release-22.11";
    nixos-23-11.url = "github:nixos/nixpkgs/release-23.11";
    nixos-24-05.url = "github:nixos/nixpkgs/release-24.05";
    nixpkgs-22-11.follows = "nixos-22-11";
  };

  # rpi stuff
  inputs = {
    # "github:nix-community/raspberry-pi-nix";
    raspberry-pi-nix.url = "github:infinidim-enterprises/raspberry-pi-nix";
    raspberry-pi-nix.inputs.nixpkgs.follows = "nixos-24-05";
  };

  # kubernetes and friends
  inputs = {
    k8s.url = "github:nixos/nixpkgs/3005f20ce0aaa58169cdee57c8aa12e5f1b6e1b3";
    kubenix.url = "github:hall/kubenix";
    kubenix.inputs.nixpkgs.follows = "nixpkgs-unstable";
  };

  # tools
  inputs = {
    nixos-vscode-server.url = "github:nix-community/nixos-vscode-server";
    nixos-vscode-server.inputs.nixpkgs.follows = "nixpkgs";
    nixos-vscode-server.inputs.flake-utils.follows = "flake-utils";

    flakey-devShells.url = "github:GetPsyched/not-so-flakey-devshells";
    flakey-devShells.inputs.nixpkgs.follows = "nixpkgs-unstable";

    nix-vscode-extensions.url = "github:nix-community/nix-vscode-extensions";
    nix-vscode-extensions.inputs.nixpkgs.follows = "nixpkgs";
    nix-vscode-extensions.inputs.flake-utils.follows = "flake-utils";

    # TODO: move to stylix!
    stylix.url = "github:danth/stylix";
    # stylix.url = "/home/vod/Public/github/stylix";
    stylix.inputs.nixpkgs.follows = "nixpkgs-unstable";
    stylix.inputs.home-manager.follows = "home-unstable";

    # TODO: fork and PR a fix for https://github.com/danth/stylix/blob/73c6955b4572346cc10f43a459949fe646efbde0/modules/nixvim/nixvim.nix#L16
    # nixvim.url = "github:nix-community/nixvim";
    # nixvim.url = "github:nix-community/nixvim";
    # nixvim.inputs.nixpkgs.follows = "nixpkgs-unstable";
    # nixvim.inputs.home-manager.follows = "home-unstable";

    /*radicle = {
      url = "git+https://seed.radicle.xyz/z3gqcJUoA1n9HaHKufZs5FCSGazv5.git";
      inputs.nixpkgs.follows = "nixpkgs";
      inputs.flake-utils.follows = "flake-utils";
    };*/

    # TODO: rewrite auto-cpufreq in crystal
    # auto-cpufreq.url = "github:AdnanHodzic/auto-cpufreq";
    # auto-cpufreq.inputs.nixpkgs.follows = "nixpkgs-unstable";

    # TODO: netboot-nix.url = "github:grahamc/netboot.nix";

    nvfetcher.url = "github:berberman/nvfetcher/0.6.2";
    # nvfetcher.url = "github:berberman/nvfetcher";
    # nvfetcher.inputs.nixpkgs.follows = "nixpkgs-unstable";
    # nvfetcher.inputs.flake-utils.follows = "flake-utils";

    nur.url = "github:nix-community/NUR";

    nurl.url = "github:nix-community/nurl";

    # go tools
    gomod2nix.url = "github:nix-community/gomod2nix";
    gomod2nix.inputs.nixpkgs.follows = "nixpkgs-master";
    gomod2nix.inputs.flake-utils.follows = "flake-utils";

    # Just in case
    call-flake.url = "github:divnix/call-flake";

    # terraform
    terraform-providers-bin.url = "github:nix-community/nixpkgs-terraform-providers-bin";
    terraform-providers-bin.inputs.nixpkgs.follows = "nixpkgs-unstable";

    # AAA
    # TODO: authentik
    authentik-nix.url = "github:nix-community/authentik-nix";
  };

  # emacs & friends
  inputs = {
    #
    nix-doom-emacs.url = "github:nix-community/nix-doom-emacs?ref=pull/316/head";

    # NOTE: https://github.com/nix-community/nix-straight.el/pull/4
    nix-doom-emacs.inputs.nix-straight.follows = "nix-straight-fix-emacs29";
    nix-doom-emacs.inputs.nixpkgs.follows = "nixpkgs-unstable";

    # nix-doom-emacs.inputs.emacs-overlay.follows = "emacs-overlay";

    nix-straight-fix-emacs29.url = "github:nix-community/nix-straight.el?ref=pull/4/head";
    nix-straight-fix-emacs29.flake = false;

    # a99c6b9036bde2f60697ce9f2ac259dfa2266dbf
    # nix-doom-emacs.inputs.doom-emacs.follows = "doom-emacs";
    doom-emacs.url = "github:doomemacs/doomemacs";
    doom-emacs.flake = false;

    # emacs-overlay.url = "github:nix-community/emacs-overlay";
    # emacs-overlay.inputs.nixpkgs.follows = "nixos";

    # emacs-overlay.follows = "nix-doom-emacs/inputs/emacs-overlay";
    # emacs-overlay.url = "github:nix-community/emacs-overlay/c16be6de78ea878aedd0292aa5d4a1ee0a5da501";

    # LSP for nix
    nixd.url = "github:nix-community/nixd?ref=refs/tags/2.4.0";
    nix4nixd.url = "github:NixOS/nix/2.19.4";
    # TODO: https://github.com/nix-community/nixd/blob/main/nixd/docs/user-guide.md
    # flake-compat, so options are visible
    nixd.inputs.nixpkgs.follows = "nixpkgs-unstable";
  };

  # wayland stuff
  inputs = {
    # TODO: reorganize inputs to have a let for vars, ie. hyprland_version = "0.41.0"; # 0.41.1
    hyprland-nixpkgs-unstable.url = "github:nixos/nixpkgs/nixpkgs-unstable";
    hyprland-systems.url = "github:nix-systems/default-linux";

    waybar.url = "github:Alexays/Waybar";
    waybar.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";

    # FIXME: hyprland version spec doesn't work!
    # hyprland.url = "github:hyprwm/Hyprland?submodules=1&ref=v0.41.1";
    # https://github.com/hyprwm/Hyprland/issues/5891

    # b03f41efec14273cf25c42d4cef326acc36cb319
    # hyprland.url = "git+https://github.com/hyprwm/Hyprland?submodules=1&rev=b03f41efec14273cf25c42d4cef326acc36cb319";
    #
    # hyprland.url = "git+https://github.com/hyprwm/Hyprland?submodules=1&ref=refs/tags/v0.41.2";
    # hyprland.url = "git+https://github.com/hyprwm/Hyprland?submodules=1&ref=refs/tags/v0.42.0";
    hyprland.url = "git+https://github.com/hyprwm/Hyprland?submodules=1&ref=refs/tags/v0.43.0";
    # hyprland.follows = "hyprland-hy3/hyprland";
    hyprland.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";
    hyprland.inputs.systems.follows = "hyprland-systems";
    hyprland.inputs.hyprutils.follows = "hyprland-hyprutils";

    hyprland-xdg-desktop-portal.url = "git+https://github.com/hyprwm/xdg-desktop-portal-hyprland";
    hyprland-xdg-desktop-portal.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";

    # hyprland-hyprutils.url = "git+https://github.com/hyprwm/hyprutils?ref=refs/tags/v0.2.1";
    hyprland-hyprutils.url = "git+https://github.com/hyprwm/hyprutils?ref=refs/tags/v0.2.3";
    hyprland-hyprutils.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";

    hyprland-hyprlock.url = "git+https://github.com/hyprwm/hyprlock";
    hyprland-hyprlock.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";
    hyprland-hyprlock.inputs.systems.follows = "hyprland/systems";
    hyprland-hyprlock.inputs.hyprutils.follows = "hyprland-hyprutils";

    hyprland-hypridle.url = "git+https://github.com/hyprwm/hypridle";
    hyprland-hypridle.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";
    hyprland-hypridle.inputs.systems.follows = "hyprland/systems";
    hyprland-hypridle.inputs.hyprutils.follows = "hyprland-hyprutils";

    hyprland-contrib.url = "git+https://github.com/hyprwm/contrib";
    hyprland-contrib.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";

    # hyprland-hyprpicker.url = "git+https://github.com/hyprwm/hyprpicker";
    # hyprland-hyprpicker.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";

    hyprland-plugins.url = "github:hyprwm/hyprland-plugins/v0.43.0";
    hyprland-plugins.inputs.nixpkgs.follows = "hyprland/nixpkgs";
    hyprland-plugins.inputs.systems.follows = "hyprland/systems";
    hyprland-plugins.inputs.hyprland.follows = "hyprland";

    hyprland-hy3.url = "github:outfoxxed/hy3/hl0.43.0"; # FIXME: hy3
    hyprland-hy3.inputs.hyprland.follows = "hyprland";

    # TODO: https://github.com/levnikmyskin/hyprland-virtual-desktops

    hyprland-hycov.url = "github:DreamMaoMao/hycov";
    hyprland-hycov.inputs.hyprland.follows = "hyprland";
    hyprland-hycov.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";
    hyprland-hycov.inputs.systems.follows = "hyprland/systems";

    hyprland-virtual-desktops.url = "github:levnikmyskin/hyprland-virtual-desktops";
    hyprland-virtual-desktops.inputs.hyprland.follows = "hyprland";
    hyprland-virtual-desktops.inputs.nixpkgs.follows = "hyprland-nixpkgs-unstable";
  };

  outputs =
    { self
    , std
    , nixpkgs
    , latest
    , hive
    , ...
    } @ inputs:
    std.growOn
      {
        inherit inputs;
        systems = [ "aarch64-linux" "x86_64-linux" ];
        nixpkgsConfig.allowUnfree = true;
        cellsFrom = ./cells;

        cellBlocks =
          with std.blockTypes;
          with hive.blockTypes; [
            (nixago "config")

            # Modules
            (functions "nixosModules")
            (functions "homeModules")

            # Profiles
            (functions "commonProfiles")
            (functions "nixosProfiles")
            (functions "homeProfiles")
            (functions "userProfiles")
            (functions "arionProfiles")

            # Suites
            (functions "nixosSuites")
            (functions "homeSuites")

            (devshells "shells" { ci.build = true; })

            (microvms "microvms")
            (arion "arionConfigurations")
            (containers "containers" { ci.publish = true; })
            # TODO: (terra "infra" "git@github.com:myorg/myrepo.git")

            (functions "lib")

            # FIXME: rename to something usefull
            # (functions "ledger-openpgp") no more ledger

            (files "files")
            (installables "packages" { ci.build = true; })
            (installables "firmwares")
            (pkgs "overrides")
            (functions "overlays")

            colmenaConfigurations
            homeConfigurations
            nixosConfigurations
            diskoConfigurations
          ];
      }

      {
        devShells = hive.harvest inputs.self [ "repo" "shells" ];

        packages = hive.harvest inputs.self [
          [ "common" "packages" ]
          [ "containers" "packages" ]
        ];

        nixosModules = hive.pick inputs.self [
          [ "k8s" "nixosModules" ]
          [ "nixos" "nixosModules" ]
        ];

        homeModules = hive.pick inputs.self [ [ "home" "homeModules" ] ];
      }

      {
        colmenaHive = hive.collect self "colmenaConfigurations";
        nixosConfigurations = hive.collect self "nixosConfigurations";
        diskoConfigurations = hive.collect self "diskoConfigurations";
        homeConfigurations = hive.collect self "homeConfigurations";
      }

      {
        debug = hive.harvest inputs.self [ "repo" "debug" ];
      };
}