satellite/hosts/nixos/iso/default.nix

# See the wiki for more details https://wiki.nixos.org/wiki/Creating_a_NixOS_live_CD
#
# Can be built with
# nix build .#nixosConfigurations.iso.config.system.build.isoImage
{
  modulesPath,
  inputs,
  outputs,
  pkgs,
  ...
}:
{
  # {{{ Imports
  imports = builtins.attrValues outputs.nixosModules ++ [
    "${modulesPath}/installer/cd-dvd/installation-cd-minimal.nix"

    inputs.sops-nix.nixosModules.sops

    ../common/global/cli/fish.nix
    ../common/optional/services/wpa_supplicant.nix
    ../common/optional/services/kanata.nix
  ];
  # }}}
  # {{{ Automount hermes
  fileSystems."/hermes" = {
    device = "/dev/disk/by-uuid/41311200-3403-4324-9ad3-4fc45a061152";
    neededForBoot = true;
    options = [
      "nofail"
      "x-systemd.automount"
    ];
  };
  # }}}
  # {{{ Nix config
  nix = {
    # Flake support and whatnot
    package = pkgs.lix;

    # Enable flakes and new 'nix' command
    settings.experimental-features = [
      "nix-command"
      "flakes"
    ];
  };
  # }}}
  #  {{{ SSH keys
  users.users.pilot.openssh.authorizedKeys.keyFiles = [
    ../calypso/keys/id_ed25519.pub
    ../lapetus/keys/id_ed25519.pub
    ../tethys/keys/id_ed25519.pub
  ];
  #  }}}
  #  {{{ Install some packages
  environment.systemPackages =
    let
      cloneConfig = pkgs.writeShellScriptBin "liftoff" ''
        git clone git@github.com:prescientmoon/everything-nix.git
        cd everything-nix
      '';
    in
    with pkgs;
    [
      sops # Secret editing
      neovim # Text editor
      cloneConfig # Clones my nixos config from github
    ];
  #  }}}

  # Tell sops-nix to use the hermes keys for decrypting secrets
  sops.age.sshKeyPaths = [ "/hermes/secrets/hermes/ssh_host_ed25519_key" ];

  # Fast but bad compression
  # isoImage.squashfsCompression = "gzip -Xcompression-level 1";
}