create public release

flake.nix

@@ -0,0 +1,57 @@
+{
+  description = "NixOS configuration";
+
+  inputs = {
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    caps2esc.url = "gitlab:asmir.abdulahovic/caps2esc";
+    nix-xilinx.url = "gitlab:asmir.abdulahovic/nix-xilinx";
+    peerix.url = "gitlab:asmir.abdulahovic/peerix";
+    sops-nix.url = "github:Mic92/sops-nix";
+    home-manager = {
+      url = "github:nix-community/home-manager";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+  };
+
+  outputs = inputs @ {
+    self,
+    nixpkgs,
+    caps2esc,
+    home-manager,
+    nix-xilinx,
+    peerix,
+    sops-nix,
+    ...
+  }: {
+    nixosConfigurations = rec {
+      nixy = nixpkgs.lib.nixosSystem {
+        system = "x86_64-linux";
+        modules = [
+          {_module.args = inputs;}
+          ./configuration.nix
+          ./packages.nix
+          ./hardware-configuration.nix
+          sops-nix.nixosModules.sops
+          home-manager.nixosModules.home-manager
+          {
+            home-manager.useGlobalPkgs = true;
+            home-manager.useUserPackages = true;
+            home-manager.users.akill = import ./home/home.nix;
+          }
+          peerix.nixosModules.peerix
+          {
+            services.peerix = {
+              enable = true;
+              globalCacheTTL = 10;
+              package = peerix.packages.x86_64-linux.peerix;
+              openFirewall = true; # UDP/12304
+              privateKeyFile = nixy.config.sops.secrets."peerix/private".path;
+              publicKeyFile = ./peerix-public;
+              publicKey = "peerix-mediabox:UDgG3xdQYv7bmx2l4ZPNRPJtp2zMmY++H/fnGeJ9BQw=";
+            };
+          }
+        ];
+      };
+    };
+  };
+}