basant/flake.nix

{
  description = "Reproducible Environment for anish.lakhwara.com";

  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs";
    flake-utils.url = "github:numtide/flake-utils";
    poonam.url = "git+ssh://gitea@git.sealight.xyz/aynish/kitaab?ref=main";
  };

  outputs = { self, nixpkgs, flake-utils, poonam }:
    flake-utils.lib.eachDefaultSystem
      (system:
        let
          pkgs = nixpkgs.legacyPackages.${system};
          my-python = pkgs.python3;
          python-with-my-packages = my-python.withPackages (p: with p; [
            jinja2
            click
            pytest
            # other python packages you want in the devShell
          ]);
          python-deps = with pkgs.python3Packages; [
            # Packages necessary at runtime to run build script
            jinja2
            python-ctags3
          ];
        in
        {
          devShell = pkgs.mkShell {
            buildInputs = [
              python-with-my-packages
              pkgs.pandoc
              self.packages.x86_64-linux.basant
            ];
            shellHook = ''
              # PYTHONPATH=${python-with-my-packages}/${python-with-my-packages.sitePackages}
              # maybe set more env-vars
            '';
          };
          packages.basant = pkgs.python3Packages.buildPythonPackage {
            pname = "basant";
            src = ./.;
            version = "0.1";
            propagatedBuildInputs = [ python-deps ];
            doCheck = false;
          };
          packages.site = pkgs.stdenv.mkDerivation {
            name = "anish-lakhwara-site";
            src = ./.;
            buildInputs = [ poonam.defaultPackage.${system} self.packages.${system}.basant ];
            configurePhase = '' 
              cp -r ${poonam.defaultPackage.${system}}/public/ ./
            '';
            buildPhase = ''
              ${self.packages.${system}.basant}/bin/main.py
            '';
            installPhase = ''
              mkdir -p $out
              cp -R output/* $out/
            '';
          };
          defaultPackage = self.packages.${system}.site;
        }) // {
      # also need a module that refreshes this flake.lock, but maybe that shouldn't live here?
      nixosModule = { options, lib, config, pkgs, ... }:
        let
          serverName = "anish.lakhwara.com";
          webRoot = "/var/www/";

          serviceConfig = config.services."${serverName}";
          options = {
            enable = lib.mkEnableOption "${serverName} service";
            enableSSL = lib.mkEnableOption "${serverName} SSL for Nginx";
          };
        in
        {
          options.services.${serverName} = options;
          config = lib.mkIf serviceConfig.enable {
            systemd.services."source-${serverName}" = {
              description = ''
                https://${serverName} source
              '';
              wantedBy = [ "multi-user.target" ];
              serviceConfig = {
                Type = "oneshot";
              };
              startAt = "*00:00:00";
              path = with pkgs; [ nix ] ++ [ self.packages.${system}.site ];
              script = ''
                set -ex

                mkdir -p ${webRoot}
                ln -sfT ${self.packages.${pkgs.system}.site} ${webRoot}${serverName}
              '';
            };
            # Allow nginx through the firewall
            networking.firewall.allowedTCPPorts = [ 80 ];
            services.nginx.enable = true;
            services.nginx.virtualHosts.${serverName} = {
              forceSSL = serviceConfig.enableSSL;
              enableACME = serviceConfig.enableSSL;
              locations."/" = { root = "${webRoot}${serverName}"; index = "/home.html"; };
            };
          };
        };
      # Test container
      nixosConfigurations."test" = nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = [
          self.nixosModule
          ({ pkgs, ... }: {
            # Only allow this to boot as a container
            boot.isContainer = true;
            networking.hostName = "basant";
            services."anish.lakhwara.com".enable = true;
          })
        ];
      };
    };
}