36 lines
1005 B
Nix
36 lines
1005 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
inputs,
|
||
|
|
pkgs,
|
||
|
|
lib,
|
||
|
|
...
|
||
|
|
}: let
|
||
|
|
inherit (config.networking) hostName;
|
||
|
|
# Only enable auto upgrade if current config came from a clean tree
|
||
|
|
# This avoids accidental auto-upgrades when working locally.
|
||
|
|
isClean = inputs.self ? rev;
|
||
|
|
in {
|
||
|
|
system.autoUpgrade = {
|
||
|
|
enable = isClean;
|
||
|
|
dates = "hourly";
|
||
|
|
flags = [
|
||
|
|
"--refresh"
|
||
|
|
];
|
||
|
|
# flake = "git://m7.rs/nix-config?ref=release-${hostName}";
|
||
|
|
# TODO: public?
|
||
|
|
flake = "git://git.mattmor.in/Madmin/nix-config-priv";
|
||
|
|
};
|
||
|
|
|
||
|
|
# Only run if current config (self) is older than the new one.
|
||
|
|
systemd.services.nixos-upgrade = lib.mkIf config.system.autoUpgrade.enable {
|
||
|
|
serviceConfig.ExecCondition = lib.getExe (
|
||
|
|
pkgs.writeShellScriptBin "check-date" ''
|
||
|
|
lastModified() {
|
||
|
|
nix flake metadata "$1" --refresh --json | ${lib.getExe pkgs.jq} '.lastModified'
|
||
|
|
}
|
||
|
|
test "$(lastModified "${config.system.autoUpgrade.flake}")" -gt "$(lastModified "self")"
|
||
|
|
''
|
||
|
|
);
|
||
|
|
};
|
||
|
|
}
|