alexion/dev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(nixos): deploy from monorepo checkout

Browse Source
This commit is contained in:
alexion
2026-09-03 16:24:28 -04:00
parent 6af09b1ccb
commit 9d48dd6c16
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
configs/nixos/AGENTS.md
View File

@@ -44,3 +44,5 @@
- `sops.secrets.<name>.owner` must name a user known on the decrypting host. - `sops.secrets.<name>.owner` must name a user known on the decrypting host.
Do not set the owner to a guest-only service user unless the host also declares that user. Do not set the owner to a guest-only service user unless the host also declares that user.
Use a host-visible owner plus a shared group mode when the guest service can read the decrypted secret file through its group. Use a host-visible owner plus a shared group mode when the guest service can read the decrypted secret file through its group.
- Pikachu deploys from the monorepo checkout copied to `~/dev`.
Do not use the old `~/wrk/dotfiles` path for remote rebuild commands.

2
configs/nixos/modules/shell/fish/functions/deploy-to.fish
View File

@@ -48,6 +48,6 @@ end
set escaped_branch (string escape -- $branch) set escaped_branch (string escape -- $branch)
set escaped_host (string escape -- $host) set escaped_host (string escape -- $host)
set remote_command "cd ~/wrk/dotfiles && git fetch origin && git switch -- $escaped_branch && git reset --hard origin/$escaped_branch && sudo nixos-rebuild switch --flake .#$escaped_host --print-build-logs" set remote_command "cd ~/dev && git fetch origin && git switch -- $escaped_branch && git reset --hard origin/$escaped_branch && sudo nixos-rebuild switch --flake .#$escaped_host --print-build-logs"
ssh -t $host $remote_command ssh -t $host $remote_command