Deadnix, statix, other cleanups

flake.nix

@@ -207,7 +207,7 @@
         inherit (inputs) tracer bevy-mandelbrot bevy-julia;
       };
 
-      legacyPackages = lib.attrsets.mapAttrs (system: pkgs:
+      legacyPackages = lib.attrsets.mapAttrs (_: pkgs:
         pkgs.appendOverlays [
           fenix.overlays.default
           naersk.overlay
@@ -224,7 +224,7 @@
             inherit specialArgs system;
 
             modules = [
-              ({ pkgs, ... }: {
+              ({ ... }: {
                 _module.args = extraArgs // {
                   inherit hostRegistry inputs zentralwerk;
                 };
@@ -327,7 +327,7 @@
 
         radiobert = nixosSystem' {
           modules = [
-            ({ modulesPath, ... }:
+            ({ ... }:
             {
               nixpkgs.overlays = [ heliwatch.overlay ];
             })
@@ -763,7 +763,7 @@
             else nixosSystem.config.system.build.toplevel
           ) self.nixosConfigurations
           // nixos.lib.filterAttrs (name: attr:
-            (builtins.match ".+-tftproot" name != null && lib.isDerivation attr)
+            (lib.match ".+-tftproot" name != null && lib.isDerivation attr)
           ) self.packages.aarch64-linux
         );
     };

hosts/auth/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ config, ... }:
 
 {
   c3d2 = {
@@ -58,7 +58,7 @@
     age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
     defaultSopsFile = ./secrets.yaml;
     secrets."portunus/seed" = {
-      group = config.services.portunus.group;
+      inherit (config.services.portunus) group;
       owner = config.services.portunus.user;
     };
   };

hosts/blogs/default.nix

@@ -1,4 +1,4 @@
-{ hostRegistry, zentralwerk, config, ... }:
+{ config, ... }:
 {
   microvm.mem = 2048;
   c3d2.deployment = {

hosts/broker/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, zentralwerk, ... }:
+{ config, pkgs, ... }:
 
 let
   mymqttui = pkgs.writeScriptBin "mqttui" ''

hosts/c3d2-web/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, nixpkgs, config, lib, pkgs, ... }:
+{ config, pkgs, ... }:
 let
   webroot = "/var/www";
   geminiRoot = "/var/gemini";
@@ -150,11 +150,11 @@ in
     home = "/var/lib/c3d2-web";
   };
 
-  systemd.tmpfiles.rules = [
+  systemd.tmpfiles.rules = with config.users.users.c3d2-web; [
-    "d ${webroot}/c3d2 0755 c3d2-web ${config.users.users.c3d2-web.group} -"
+    "d ${webroot}/c3d2 0755 c3d2-web ${group} -"
-    "d ${webroot}/log 0755 c3d2-web ${config.users.users.c3d2-web.group} -"
+    "d ${webroot}/log 0755 c3d2-web ${group} -"
-    "d ${geminiRoot} 0755 c3d2-web ${config.users.users.c3d2-web.group} -"
+    "d ${geminiRoot} 0755 c3d2-web ${group} -"
-    "d ${config.users.users.c3d2-web.home} 0700 c3d2-web ${config.users.users.c3d2-web.group} -"
+    "d ${home} 0700 c3d2-web ${group} -"
   ];
 
   # Build script

hosts/dacbert/default.nix

@@ -1,4 +1,4 @@
-{ hostRegistry, config, lib, pkgs, modulesPath, ... }:
+{ hostRegistry, config, lib, pkgs, ... }:
 
 {
   c3d2 = {

hosts/direkthilfe/default.nix

@@ -1,7 +1,6 @@
-{ pkgs, ... }:
+{ config, pkgs, ... }:
-let
+
-  domain = "direkthilfe.c3d2.de";
+{
-in {
   networking.hostName = "direkthilfe";
   microvm.mem = 1024;
   c3d2.deployment = {
@@ -27,7 +26,7 @@ in {
 
   services.engelsystem = {
     enable = true;
-    domain = domain;
+    domain = "direkthilfe.c3d2.de";
     createDatabase = true;
     package = pkgs.engelsystem.override { php = pkgs.php74; };
     config = {
@@ -64,7 +63,7 @@ in {
   services.phpfpm.phpPackage = pkgs.php74;
   services.nginx = {
     enable = true;
-    virtualHosts."${domain}" = {
+    virtualHosts."${config.services.engelsystem.domain}" = {
       default = true;
       forceSSL = true;
       enableACME = true;

hosts/dn42/default.nix

@@ -140,7 +140,7 @@ in {
               }
             '' else
               "";
-            interface = if conf ? interface then conf.interface else name;
+            interface = conf.interface or name;
           in "${neighbor4}${neighbor6}") neighbors));
     in ''
       protocol kernel {

hosts/factorio/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ config, lib, ... }:
 
 {
   c3d2 = {

hosts/ftp/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, zentralwerk, ... }:
+{ config, pkgs, ... }:
 
 {
   c3d2 = {

hosts/gitea/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, zentralwerk, ... }:
+{ config, pkgs, lib, ... }:
 
 {
   c3d2 = {

hosts/glotzbert/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, pkgs, ... }:
+{ config, pkgs, ... }:
 
 {
   imports = [ ./hardware-configuration.nix ];

hosts/glotzbert/hardware-configuration.nix

@@ -1,7 +1,7 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{ lib, modulesPath, ... }:
 
 {
   imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];

hosts/grafana/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, pkgs, lib, modulesPath, ... }:
+{ config, pkgs, ... }:
 
 let
   restartServices = [ "grafana" "influxdb" ];

hosts/hedgedoc/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ config, pkgs, ... }:
 
 {
   c3d2 = {

hosts/hydra/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, pkgs, lib, ... }:
+{ config, pkgs, ... }:
 
 {
   imports = [
@@ -52,5 +52,5 @@
   c3d2.hq.statistics.enable = true;
   services.smartd.enable = true;
 
-  system.stateVersion = "20.09"; # Did you read the comment?
+  system.stateVersion = "20.09";
 }

hosts/hydra/hardware-configuration.nix

@@ -1,7 +1,7 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{ config, lib, modulesPath, ... }:
 
 {
   imports =

hosts/hydra/hydra.nix

@@ -1,4 +1,4 @@
-{ self, hostRegistry, hydra-ca, config, lib, pkgs, ... }:
+{ config, lib, ... }:
 
 let
   cachePort = 5000;

hosts/leon/default.nix

@@ -26,7 +26,7 @@
 #                  `...-'                                       `...-'
 #--------------------------------------------------------------------------------
 
-{ config, lib, pkgs, ... }:
+{ lib, pkgs, ... }:
 {
   deployment = {
     persistedShares = [ "/etc" "/home" "/var" ];

hosts/leoncloud/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ config, lib, pkgs, ... }:
 
 {
   deployment = {

hosts/matemat/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ pkgs, ... }:
 
 {
   c3d2 = {

hosts/mediawiki/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ config, lib, pkgs, ... }:
 
 {
   networking.hostName = "mediawiki";

hosts/mobilizon/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, pkgs, ... }:
+{ config, pkgs, ... }:
 {
   microvm.mem = 1024;
   c3d2.isInHq = false;

hosts/mucbot/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, tigger, ... }:
+{ pkgs, tigger, ... }:
 
 {
   deployment = {

hosts/network-homepage/default.nix

@@ -1,6 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ zentralwerk, pkgs, ... }:
-
-with lib;
 
 {
   system.stateVersion = "22.05";

hosts/nfsroot/default.nix

@@ -1,7 +1,5 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ lib, ... }:
 let
-  netConfig = zentralwerk.lib.config.site.net.serv;
-
   nfsExports = [
     "var/lib/nfsroot/dacbert"
     "var/lib/nfsroot/riscbert"

hosts/nncp/default.nix

@@ -37,7 +37,7 @@
             xx = "tx"; # transmit only
             when-tx-exists = true;
           };
-        in lib.mapAttrs (name: value:
+        in lib.mapAttrs (_: value:
           value // {
             via = lib.lists.remove "c3d2" value.via;
           } // (lib.attrsets.optionalAttrs (value.addrs or { } != { }) {

hosts/nncp/neighbours.nix

@@ -1,7 +1,7 @@
-{ config, lib, pkgs, ... }:
+{ config, pkgs, ... }:
 
-let
+{
-  exec = {
+  programs.nncp.settings.neigh.emery.exec = {
     # A command to asynchronously export store paths to a remote caller.
     nix-store-export = with pkgs;
       [
@@ -16,4 +16,4 @@ let
     # A command to import store paths from a remote caller.
     nix-store-import = [ "${config.nix.package}/bin/nix-store" "--import" ];
   };
-in { programs.nncp.settings.neigh = { emery = { inherit exec; }; }; }
+}

hosts/oparl/default.nix

@@ -1,9 +1,7 @@
-{ zentralwerk, oparl-scraper, config, pkgs, ... }:
+{ oparl-scraper, config, pkgs, ... }:
+
 let
   ratsinfo-scraper = import oparl-scraper { inherit pkgs; };
-
-  netConfig = zentralwerk.lib.config.site.net.serv;
-
 in
 {
   c3d2.deployment = {
@@ -41,7 +39,7 @@ in
     path = with pkgs; [
       git openssh poppler_utils ratsinfo-scraper
     ];
-    script = ''
+    script = /* bash */ ''
       if [ -d data ]; then
         pushd data
         git pull

hosts/prometheus/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, pkgs, lib, ... }:
+{ zentralwerk, config, lib, ... }:
 
 {
   sops.defaultSopsFile = ./secrets.yaml;
@@ -64,7 +64,7 @@
       static_configs =
         let
           zwNets = zentralwerk.lib.config.site.net;
-          fromNet = net: filter:
+          fromNet = net: _:
             map (host:
               "${host}.${net}.zentralwerk.org:9100"
             ) (builtins.attrNames zwNets.${net}.hosts4);

hosts/public-access-proxy/proxy.nix

@@ -1,50 +1,48 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, ... }:
 
-with lib;
+let
-let cfg = config.services.proxy;
+  cfg = config.services.proxy;
-
+  canonicalize = builtins.replaceStrings [ "*" "." ":" "[" "]" ] [ "all" "_" "_" "" "" ];
-    canonicalize = builtins.replaceStrings ["*" "." ":" "[" "]"] ["all" "_" "_" "" ""];
+in
-
+{
-in {
 
   options.services.proxy = {
-
+    enable = lib.mkOption {
-    enable = mkOption {
       default = false;
       description = "whether to enable proxy";
-      type = types.bool;
+      type = lib.types.bool;
     };
 
-    proxyHosts = mkOption {
+    proxyHosts = lib.mkOption {
-      type = types.listOf (types.submodule {
+      type = lib.types.listOf (lib.types.submodule {
         options = {
-          hostNames = mkOption {
+          hostNames = lib.mkOption {
-            type = types.listOf types.str;
+            type = with lib.types; listOf str;
             default = [ ];
             description = ''
               Proxy these hostNames.
             '';
           };
-          proxyTo = mkOption {
+          proxyTo = lib.mkOption {
-            type = types.submodule {
+            type = lib.types.submodule {
               options = {
-                host = mkOption {
+                host = lib.mkOption {
-                  type = types.nullOr types.string;
+                  type = with lib.types; nullOr string;
                   default = null;
                   description = ''
                     Host to forward traffic to.
                     Any hostname may only be used once
                   '';
                 };
-                httpPort = mkOption {
+                httpPort = lib.mkOption {
-                  type = types.int;
+                  type = lib.types.int;
                   default = 80;
                   description = ''
                     Port to forward http to.
                   '';
                 };
-                httpsPort = mkOption {
+                httpsPort = lib.mkOption {
-                  type = types.int;
+                  type = lib.types.int;
                   default = 443;
                   description = ''
                     Port to forward http to.
@@ -57,8 +55,8 @@ in {
             '';
             default = { };
           };
-          matchArg = mkOption {
+          matchArg = lib.mkOption {
-            type = types.str;
+            type = lib.types.str;
             default = "";
             description = "Optional argument to HAProxy `req.ssl_sni -i`";
           };
@@ -76,11 +74,9 @@ in {
         };
       }];
     };
-
   };
 
-  config = mkIf cfg.enable {
+  config = lib.mkIf cfg.enable {
-
     services.haproxy = {
       enable = true;
       config = ''
@@ -101,10 +97,9 @@ in {
           option forwardfor
           http-request set-header X-Forwarded-Proto http
           http-request set-header X-Forwarded-Port 80
-          ${
+          ${lib.concatMapStrings ({ proxyTo, hostNames, matchArg }:
-            concatMapStrings ({ proxyTo, hostNames, matchArg }:
+              lib.optionalString (hostNames != [ ] && proxyTo.host != null) (
-              optionalString (hostNames != [ ] && proxyTo.host != null) (
+                lib.concatMapStrings (hostname: ''
-                concatMapStrings (hostname: ''
                   use-server ${canonicalize hostname}-http if { req.hdr(host) -i ${matchArg} ${hostname} }
                   server ${canonicalize hostname}-http ${proxyTo.host}:${
                     toString proxyTo.httpPort
@@ -118,13 +113,13 @@ in {
           bind :::443 v4v6
           tcp-request inspect-delay 5s
           tcp-request content accept if { req.ssl_hello_type 1 }
-          ${concatMapStrings ({ proxyTo, hostNames, matchArg }:
+          ${lib.concatMapStrings ({ proxyTo, hostNames, matchArg }:
-              concatMapStrings (hostname: ''
+              lib.concatMapStrings (hostname: ''
                 use_backend ${canonicalize proxyTo.host}-https if { req.ssl_sni -i ${matchArg} ${hostname} }
               '') hostNames
           ) cfg.proxyHosts}
 
-        ${concatMapStrings ({ proxyTo, hostNames, matchArg  }: ''
+        ${lib.concatMapStrings ({ proxyTo, ...  }: ''
           backend ${canonicalize proxyTo.host}-https
             server ${canonicalize proxyTo.host}-https ${proxyTo.host}:${
               toString proxyTo.httpsPort

hosts/public-access-proxy/stats.nix

@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ pkgs, ... }:
 {
   c3d2.hq.statistics.enable = true;
 

hosts/pulsebert/hardware-configuration.nix

@@ -1,7 +1,7 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{ lib, ... }:
 
 {
   #imports =

hosts/rpi-netboot/default.nix

@@ -1,4 +1,4 @@
-{ hostRegistry, nixpkgs, config, lib, pkgs, modulesPath, ... }:
+{ hostRegistry, lib, pkgs, ... }:
 
 {
   c3d2 = {

hosts/scrape/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, pkgs, config, scrapers, ... }:
+{ pkgs, config, scrapers, ... }:
 
 let
   freifunkNodes = {

hosts/sdrweb/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, config, pkgs, ... }:
+{ config, pkgs, ... }:
 {
   deployment = {
     # needs to keep just its ssh key for sops-nix

hosts/server10/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, ... }:
 
 {
   imports = [

hosts/server10/hardware-configuration.nix

@@ -1,4 +1,4 @@
-{ config, lib, pkgs, modulesPath, ... }:
+{ config, lib, modulesPath, ... }:
 
 {
   imports =

hosts/server8/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ ... }:
 
 {
   imports = [

hosts/server8/hardware-configuration.nix

@@ -1,7 +1,7 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{ config, lib, modulesPath, ... }:
 
 {
   imports =

hosts/server9/default.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+_:
 
 {
   imports = [

hosts/server9/hardware-configuration.nix

@@ -1,7 +1,7 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{ config, lib, modulesPath, ... }:
 
 {
   imports =

hosts/spaceapi/default.nix

@@ -1,4 +1,5 @@
-{ zentralwerk, ... }:
+_:
+
 {
   c3d2.deployment = {
     server = "server10";

hosts/ticker/default.nix

@@ -1,6 +1,4 @@
-{ zentralwerk, config, lib, pkgs, ... }:
+{ zentralwerk, config, ... }:
-
-with lib;
 
 {
   system.stateVersion = "22.05";

hosts/zengel/default.nix

@@ -1,7 +1,6 @@
-{ pkgs, ... }:
+{ config, pkgs, ... }:
-let
+
-  domain = "zengel.datenspuren.de";
+{
-in {
   networking.hostName = "zengel";
   microvm.mem = 1024;
   c3d2.deployment = {
@@ -13,7 +12,7 @@ in {
 
   services.engelsystem = {
     enable = true;
-    domain = domain;
+    domain = "zengel.datenspuren.de";
     createDatabase = true;
     package = pkgs.engelsystem.override { php = pkgs.php74; };
     config = {
@@ -50,7 +49,7 @@ in {
   services.phpfpm.phpPackage = pkgs.php74;
   services.nginx = {
     enable = true;
-    virtualHosts."${domain}" = {
+    virtualHosts."${config.services.engelsystem.domain}" = {
       default = true;
       forceSSL = true;
       enableACME = true;

modules/audio-server.nix

@@ -35,7 +35,7 @@
         bluetoothSupport = true;
         advancedBluetoothCodecs = true;
         zeroconfSupport = true;
-      }).overrideAttrs (oldAttrs: {
+      }).overrideAttrs (_: {
         # one test times out
         doCheck = false;
       });

modules/backup.nix

@@ -2,7 +2,7 @@
 
 {
   config.services.postgresqlBackup = {
-    enable = config.services.postgresql.enable;
+    inherit (config.services.postgresql) enable;
     backupAll = true;
     compression = "zstd";
     # compressionLevel = 9; # TODO: only available with 21.11

modules/c3d2.nix

@@ -169,21 +169,21 @@ in
 
   config =
     let
-      adminKeys = (with builtins; lib.lists.flatten (
+      adminKeys = with builtins; lib.lists.flatten (
         map
           (getAttr "sshKeys")
           (attrValues cfg.users)
-      ));
+      );
       mkIfIsInHq = x: lib.mkIf cfg.isInHq (lib.mkDefault x);
     in
     {
       networking.hosts = lib.mkIf cfg.mergeHostsFile
         ((
           lib.attrsets.mapAttrs' (n: v: { name = v.ip4; value = [ "${n}.c3d2" ]; })
-            (lib.attrsets.filterAttrs (n: v: v.ip4 != null) cfg.hosts)
+            (lib.attrsets.filterAttrs (_: v: v.ip4 != null) cfg.hosts)
         ) // (
           lib.attrsets.mapAttrs' (n: v: { name = v.ip6; value = [ "${n}.c3d2" ]; })
-            (lib.attrsets.filterAttrs (n: v: v.ip6 != null) cfg.hosts)
+            (lib.attrsets.filterAttrs (_: v: v.ip6 != null) cfg.hosts)
         ));
 
       programs.nncp.settings = lib.optionalAttrs cfg.mergeNncpSettings cfg.nncp;

modules/cluster/default.nix

@@ -1,4 +1,4 @@
-{ zentralwerk, hostRegistry, config, lib, pkgs, ... }:
+{ zentralwerk, hostRegistry, config, lib, ... }:
 let
   inherit (config.networking) hostName;
 
@@ -15,8 +15,6 @@ let
       then net
       else result
     ) null [ "cluster" "serv" ];
-
-  ipv4Addr = zentralwerk.lib.config.site.net.${serverNet hostName}.hosts4.${hostName};
 in {
   # Open firewall between cluster members
   networking.firewall.extraCommands = lib.concatMapStrings (server:
@@ -41,7 +39,7 @@ in {
     );
     nomad = {
       datacenter = "c3d2";
-      servers = servers;
+      inherit servers;
       # run tasks only on these:
       client.enable = builtins.elem hostName microvmServers;
       client.meta =

modules/cluster/deployment-options.nix

@@ -13,9 +13,9 @@
     networks = mkOption {
       type = with types; listOf str;
       default = builtins.attrNames (
-        lib.filterAttrs (net: { hosts4, hosts6, ... }:
+        lib.filterAttrs (_: { hosts4, hosts6, ... }:
           hosts4 ? ${config.networking.hostName} ||
-          lib.filterAttrs (ctx: hosts6:
+          lib.filterAttrs (_: hosts6:
             hosts6 ? ${config.networking.hostName}
           ) hosts6 != {}
         ) zentralwerk.lib.config.site.net

modules/cluster/deployment.nix

@@ -31,8 +31,7 @@ in
 {
   microvm = {
     hypervisor = "cloud-hypervisor";
-    vcpu = config.deployment.vcpu;
+    inherit (config.deployment) mem vcpu;
-    mem = config.deployment.mem;
 
     preStart = ''
       # Discard old writable store overlay

modules/logging.nix

@@ -1,28 +1,6 @@
-{ hostRegistry, config, pkgs, lib, ... }:
+{ config, pkgs, lib, ... }:
 
-let
+{
-
-  nginxGlobalLogging = ''
-    log_format graylog2_json escape=json '{ "timestamp": "$time_iso8601", '
-                     '"remote_addr": "$remote_addr", '
-                     '"body_bytes_sent": $body_bytes_sent, '
-                     '"request_time": $request_time, '
-                     '"response_status": $status, '
-                     '"request": "$request", '
-                     '"request_method": "$request_method", '
-                     '"host": "$host",'
-                     '"upstream_cache_status": "$upstream_cache_status",'
-                     '"upstream_addr": "$upstream_addr",'
-                     '"http_x_forwarded_for": "$http_x_forwarded_for",'
-                     '"http_referrer": "$http_referer", '
-                     '"http_user_agent": "$http_user_agent" }';
-
-    # replace the hostnames with the IP or hostname of your Graylog2 server
-    access_log syslog:server=graylog.server.org:12301 graylog2_json;
-    error_log syslog:server=graylog.server.org:12302;
-  '';
-
-in {
   # add central logging
   services.journalbeat = {
     enable = false;

modules/microvm.nix

@@ -19,9 +19,9 @@ let
       "${builtins.substring 0 1 hash}2:${c 2}:${c 4}:${c 6}:${c 8}:${c 10}";
 
   nets = builtins.attrNames (
-    lib.filterAttrs (net: { hosts4, hosts6, ... }:
+    lib.filterAttrs (_: { hosts4, hosts6, ... }:
       hosts4 ? ${hostName} ||
-      lib.filterAttrs (ctx: hosts6:
+      lib.filterAttrs (_: hosts6:
         hosts6 ? ${hostName}
       ) hosts6 != {}
     ) zentralwerk.lib.config.site.net

modules/nncp.nix

@@ -1,13 +1,10 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, ... }:
-with lib;
 
 let
   nncpCfgFile = "/run/nncp.hjson";
   programCfg = lib.optionalAttrs (config.programs ? nncp) config.programs.nncp;
   callerCfg = config.services.nncp.caller;
   daemonCfg = config.services.nncp.daemon;
-  settingsFormat = pkgs.formats.json { };
-  jsonCfgFile = settingsFormat.generate "nncp.json" programCfg.settings;
   pkg = programCfg.package;
 in
 {
@@ -15,13 +12,13 @@ in
 
     services.nncp = {
       caller = {
-        enable = mkEnableOption ''
+        enable = lib.mkEnableOption ''
           croned NNCP TCP daemon caller.
           The daemon will take configuration from
           <xref linkend="opt-programs.nncp.settings"/>
         '';
-        extraArgs = mkOption {
+        extraArgs = lib.mkOption {
-          type = with types; listOf str;
+          type = with lib.types; listOf str;
           description = "Extra command-line arguments to pass to caller.";
           default = [ ];
           example = [ "-autotoss" ];
@@ -29,18 +26,18 @@ in
       };
 
       daemon = {
-        enable = mkEnableOption ''
+        enable = lib.mkEnableOption ''
           NNCP TCP synronization daemon.
           The daemon will take configuration from
           <xref linkend="opt-programs.nncp.settings"/>
         '';
 
         socketActivation = {
-          enable = mkEnableOption ''
+          enable = lib.mkEnableOption ''
             Whether to run nncp-daemon persistently or socket-activated.
           '';
-          listenStreams = mkOption {
+          listenStreams = lib.mkOption {
-            type = with types; listOf str;
+            type = with lib.types; listOf str;
             description = ''
               TCP sockets to bind to.
               See <xref linkend="opt-systemd.sockets._name_.listenStreams"/>.
@@ -49,8 +46,8 @@ in
           };
         };
 
-        extraArgs = mkOption {
+        extraArgs = lib.mkOption {
-          type = with types; listOf str;
+          type = with lib.types; listOf str;
           description = "Extra command-line arguments to pass to daemon.";
           default = [ ];
           example = [ "-autotoss" ];
@@ -60,15 +57,14 @@ in
     };
   };
 
-  config = mkIf (programCfg.enable or callerCfg.enable or daemonCfg.enable) {
+  config = lib.mkIf (programCfg.enable or callerCfg.enable or daemonCfg.enable) {
-
     assertions = [{
-      assertion = with builtins;
+      assertion =
         let
           callerCongfigured =
             let neigh = config.programs.nncp.settings.neigh or { };
-            in lib.lists.any (x: hasAttr "calls" x && x.calls != [ ])
+            in lib.lists.any (x: lib.hasAttr "calls" x && x.calls != [ ])
-            (attrValues neigh);
+            (lib.attrValues neigh);
         in !callerCfg.enable || callerCongfigured;
       message = "NNCP caller enabled but call configuration is missing";
     }];
@@ -89,7 +85,7 @@ in
       };
     };
 
-    systemd.services."nncp-daemon" = mkIf daemonCfg.enable {
+    systemd.services."nncp-daemon" = lib.mkIf daemonCfg.enable {
       enable = !daemonCfg.socketActivation.enable;
       description = "NNCP TCP syncronization daemon.";
       documentation = [ "http://www.nncpgo.org/nncp_002ddaemon.html" ];
@@ -106,7 +102,7 @@ in
       };
     };
 
-    systemd.services."nncp-daemon@" = mkIf daemonCfg.socketActivation.enable {
+    systemd.services."nncp-daemon@" = lib.mkIf daemonCfg.socketActivation.enable {
       description = "NNCP TCP syncronization daemon.";
       documentation = [ "http://www.nncpgo.org/nncp_002ddaemon.html" ];
       after = [ "network.target" ];
@@ -123,7 +119,7 @@ in
       };
     };
 
-    systemd.sockets.nncp-daemon = mkIf daemonCfg.socketActivation.enable {
+    systemd.sockets.nncp-daemon = lib.mkIf daemonCfg.socketActivation.enable {
       inherit (daemonCfg.socketActivation) listenStreams;
       description = "socket for NNCP TCP syncronization.";
       conflicts = [ "nncp-daemon.service" ];

modules/plume.nix

@@ -1,6 +1,5 @@
 { config, lib, pkgs, ... }:
 let
-  inherit (pkgs) plume;
   cfg = config.services.plume;
 in
 {
@@ -33,7 +32,7 @@ in
     ids.uids.plume = 499;
     users.users.${cfg.user} = {
       uid = config.ids.uids.plume;
-      group = cfg.group;
+      inherit (cfg) group;
       home = "/var/lib/plume";
     };
     users.groups.${cfg.group} = {};
@@ -52,11 +51,11 @@ in
       after = [ "postgresql.service" ];
       requires = [ "postgresql.service" ];
       wantedBy = [ "multi-user.target" ];
-      path = [ plume ];
+      path = [ pkgs.plume ];
       script = ''
         ln -sf ${cfg.envFile} .env
         mkdir -p static/media
-        for f in ${plume}/share/plume/static/*; do
+        for f in ${pkgs.plume}/share/plume/static/*; do
           n=$(basename "$f")
           if [ "$n" != media ]; then
             rm -f "static/$n"
@@ -79,7 +78,7 @@ in
       #! ${pkgs.runtimeShell} -e
 
       plm() {
-        sudo -u ${config.services.plume.user} -- ${plume}/bin/plm $@
+        sudo -u ${config.services.plume.user} -- ${pkgs.plume}/bin/plm $@
       }
 
       plm migration run

modules/rpi-netboot.nix

@@ -1,4 +1,4 @@
-{ hostRegistry, config, pkgs, lib, ... }:
+{ config, pkgs, lib, ... }:
 {
   boot = {
     loader.generic-extlinux-compatible.enable = false;

overlays/bmxd.nix

@@ -1,4 +1,4 @@
-{ stdenv, fetchgit, fetchpatch, }:
+{ stdenv, fetchgit }:
 
 stdenv.mkDerivation {
   pname = "bmxd";

overlays/plume/default.nix

@@ -1,6 +1,5 @@
 { naersk
 , fenix
-, curl
 , nodejs
 , rustPlatform
 , stdenv
@@ -137,7 +136,7 @@ let
         "--package=plume-front"
       ];
     copyLibs = true;
-    overrideMain = oa: {
+    overrideMain = _: {
       buildPhase = ''
         wasm-pack build --mode no-install --target web --release plume-front
       '';

packages.nix

@@ -5,12 +5,7 @@ let
     let
       hostConf = hostRegistry.hosts."${name}";
     in
-    if hostConf ? ip4
+      hostConf.ip4 or (hostConf.ip6 or (throw "Host ${name} has no ip4 or ip6 address"));
-    then hostConf.ip4
-    else if hostConf ? ip6
-    then hostConf.ip6
-    else throw "Host ${name} has no ip4 or ip6 address";
-
 
   # all the input flakes for `nix copy` to the build machine,
   # allowing --override-input
@@ -309,10 +304,7 @@ lib.attrsets.mapAttrs
           ];
         }).config.microvm.declaredRunner;
 
-        "${host}-tftproot" =
+        "${host}-tftproot" = config.system.build.tftproot or (lib.trace "No tftproot for ${host}" null);
-          if config.system.build ? tftproot
-          then config.system.build.tftproot
-          else lib.trace "No tftproot for ${host}" null;
       }
     )
     { }