50 lines
1.5 KiB
Nix
50 lines
1.5 KiB
Nix
{
|
|
description = "infra-shell";
|
|
|
|
inputs.nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
|
|
|
|
outputs = { self, nixpkgs }:
|
|
let
|
|
stableSystems = ["x86_64-linux" "aarch64-linux" "x86_64-darwin" "aarch64-darwin"];
|
|
forAllSystems = nixpkgs.lib.genAttrs stableSystems;
|
|
pkgsFor = nixpkgs.lib.genAttrs stableSystems (
|
|
system: import nixpkgs { inherit system; config.allowUnfree = true; }
|
|
);
|
|
in rec {
|
|
devShells = forAllSystems (system: let
|
|
pkgs = pkgsFor.${system};
|
|
in {
|
|
default = let
|
|
pythonPkgs = pkgs.python311.withPackages (
|
|
_: with (pkgs.python311Packages); [
|
|
ipython pyyaml jinja2 PyGithub
|
|
pyopenssl cryptography
|
|
hvac
|
|
]
|
|
);
|
|
in pkgs.mkShellNoCC {
|
|
packages = with pkgs.buildPackages; [
|
|
# misc
|
|
git openssh jq fzf silver-searcher direnv
|
|
# networking
|
|
curl nmap nettools dnsutils
|
|
# infra
|
|
terraform ansible_2_16 pythonPkgs
|
|
# security
|
|
pass vault bitwarden-cli yubikey-manager pwgen
|
|
# cloud
|
|
aliyun-cli awscli doctl google-cloud-sdk
|
|
hcloud s3cmd scaleway-cli
|
|
];
|
|
|
|
shellHook = ''
|
|
./ansible/roles.py --check || \
|
|
echo -e '\nWARNING: Your role versions appear to be incorrect!' >&2
|
|
eval "$(direnv hook bash)"
|
|
direnv allow .
|
|
'';
|
|
};
|
|
});
|
|
};
|
|
}
|