hostname := `hostname`

cachix-cache-name := "tilde"

attic-cache-name := "tilde"

cache-jobs := "5"

nh-build-flags := "--out-link result"

@just --list

[doc("Builds the current host")]

build: (build-system hostname)

[doc("Build a host by name")]

build-system name:

nh darwin build .#darwinConfigurations.{{ name }} {{ nh-build-flags }}

[doc("Build a specific home-manager user")]

build-home name:

nh home build .#homeConfigurations.{{ name }}.activation-script {{ nh-build-flags }}

[doc("Switch to the current host profile")]

nh darwin switch .#

[doc("Check flake")]

nix flake check --impure --all-systems

[doc("Open a Nix REPL for this flake")]

nix repl --expr "builtins.getFlake \"$PWD\""

[doc("Format code")]

treefmt

[doc("Push the `result` to the binary caches")]

push-result-to-cache: (push-to-cache "result")

[doc("Push an arbitrary path to the binary caches")]

push-to-cache path:

cachix push --jobs {{ cache-jobs }} {{ cachix-cache-name }} {{ path }}

attic push --jobs {{ cache-jobs }} {{ attic-cache-name }} {{ path }}

[doc("Move `bashrc` and `zshrc` files so they don't get clobbered")]

sudo mv /etc/bashrc /etc/bashrc.before-nix-darwin

sudo mv /etc/zshrc /etc/zshrc.before-nix-darwin

sudo mv /etc/zprofile /etc/zprofile.before-nix-darwin

[doc("Edit a secret file")]

edit-secret file:

EDITOR="zeditor --wait" sops {{ file }}

[doc("Update all secret files with new keys")]

find . -regextype egrep -regex '^.*secrets\.(json|yml)' -execdir sops updatekeys {} -y ';'

[doc("Generate an age key for the current user")]

mkdir -p ~/.config/sops/age

nix shell nixpkgs#age --command sh -c "age-keygen -o ~/.config/sops/age/keys.txt"

[doc("Get the age key for the current host")]

nix shell nixpkgs#ssh-to-age --command sh -c "sudo cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age"