feat(koi): desu-deploy setup

flake.lock

@@ -43,10 +43,50 @@
         "type": "github"
       }
     },
+    "desu-deploy": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1722725362,
+        "narHash": "sha256-JKonFnKwiN7VRXhn3pUhoN6TGDoyHepWbMfVd35wTew=",
+        "owner": "teidesu",
+        "repo": "desu-deploy",
+        "rev": "a77b8e790324df51471cf40924acff9643972dfa",
+        "type": "github"
+      },
+      "original": {
+        "owner": "teidesu",
+        "repo": "desu-deploy",
+        "rev": "a77b8e790324df51471cf40924acff9643972dfa",
+        "type": "github"
+      }
+    },
     "flake-utils": {
       "inputs": {
         "systems": "systems_2"
       },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_3"
+      },
       "locked": {
         "lastModified": 1681202837,
         "narHash": "sha256-H+Rh19JDwRtpVPAWp64F+rlEtxUWBAQW28eAi3SRSzg=",
@@ -193,6 +233,7 @@
       "inputs": {
         "agenix": "agenix",
         "bootspec-secureboot": "bootspec-secureboot",
+        "desu-deploy": "desu-deploy",
         "home-manager": "home-manager_2",
         "nix-darwin": "nix-darwin",
         "nix-index-database": "nix-index-database",
@@ -231,9 +272,24 @@
         "type": "github"
       }
     },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "vscode-server": {
       "inputs": {
-        "flake-utils": "flake-utils",
+        "flake-utils": "flake-utils_2",
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {

flake.nix

@@ -38,6 +38,9 @@
 
     nix-index-database.url = "github:nix-community/nix-index-database";
     nix-index-database.inputs.nixpkgs.follows = "nixpkgs";
+
+    desu-deploy.url = "github:teidesu/desu-deploy/a77b8e790324df51471cf40924acff9643972dfa";
+    desu-deploy.inputs.nixpkgs.follows = "nixpkgs";
   };
 
   outputs =
@@ -49,6 +52,7 @@
     , bootspec-secureboot
     , home-manager
     , nix-darwin
+    , desu-deploy
     , ...
     }:
     let
@@ -94,10 +98,11 @@
     in
     {
       nixosConfigurations = {
-        koi = mkNixosSystem {
+        koi = mkNixosSystem rec {
           system = "x86_64-linux";
           modules = [
             bootspec-secureboot.nixosModules.bootspec-secureboot
+            desu-deploy.nixosModules.${system}.default
             ./hosts/koi/configuration.nix
           ];
         };

hosts/koi/configuration.nix

@@ -93,5 +93,10 @@
     item = "nofile";
     value = "8192";
   }];
+
+  services.desu-deploy = {
+    enable = true;
+    key = builtins.readFile (abs "ssh/desu-deploy.pub");
+  };
 }
 

hosts/koi/containers/bots/pcre-sub-bot.nix

@@ -20,7 +20,7 @@ in {
   };
 
   virtualisation.oci-containers.containers.pcre-sub-bot = {
-    image = "ghcr.io/teidesu/pcre-sub-bot:sha-d010ea7@sha256:d30a1adf852f1953bb4015d55f0031a41bd65657abc4880ecd1dfcb67a77a678";
+    image = "ghcr.io/teidesu/pcre-sub-bot:latest";
     volumes = [
       "/srv/pcre-sub-bot:/app/bot-data"
     ];

hosts/koi/containers/teisu.nix

@@ -18,7 +18,7 @@ in {
   };
 
   virtualisation.oci-containers.containers.teisu = {
-    image = "ghcr.io/teidesu/tei.su:sha-e6a632c@sha256:1f6da149f278d05136155ff9faa858565dcb5ab66c429cba6839f731879fcf71";
+    image = "ghcr.io/teidesu/tei.su:latest";
     volumes = [
       "/srv/teisu:/app/.runtime"
     ];

ssh/desu-deploy.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGETtDyRDYKO2O6Ip+4dGaBCHFRpPH1PSgqIShPEJAfB