In reply to @julian:nekover.se
That makes sense, thanks!
What I'm wondering now, is how to make sure my systems are up-to-date then. Some kind of automated deployment from some deployment system, which automatically updates the flake.lock?
What are you all doing?

Hey,
how do I reference another option when using colmena? I want to set the dhparams path for the nginx service to the value of the security.dhparams.params.nginx.pathoption (which is readOnly anyways).

In nixos, that would be config.. I tried that host. and config.host. but it doesnt work like that.

In reply to @zhaofeng:zhaofeng.li
It definitely should work. What does your config look like?

{
  meta = {
    *shortened*
  };

  defaults = { pkgs, ... }: {
      *shortened*
  };

  web = {
    networking  = {
      hostName = "web";
      defaultGateway = "10.2.0.1";
      interfaces.eth0.ipv4.addresses = [ {
        address = "10.2.1.201";
        prefixLength = 16;
      } ];
    };

    deployment = {
      targetHost = "10.2.1.201";
      tags = [ "lxc" ];
    };
    boot.isContainer = true;
    systemd.suppressedSystemUnits = [
      "dev-mqueue.mount"
      "sys-kernel-debug.mount"
      "sys-fs-fuse-connections.mount"
    ];

    security = {
      dhparams = {
        enable = true;
        stateful = true;
        path = "/etc/dhparams";
        params.nginx = {
          bits = 4096;
        };
      };
    };

    services = {
      nginx = {
        enable =  true;
        sslDhparam = config.security.dhparams.params.nginx.path;
      };
    };
  };

}

This config gives error: undefined variable 'config'

Do it like:

web = { pkgs, config, ... }: {
  networking = { ... };
};

or better,

web = ./web.nix; # which contains a lambda that takes { pkgs, config, ... }

Note they are just regular NixOS modules, which means you can do

mkdir hosts
cp -r /etc/nixos ./hosts/web

And then

web = ./hosts/web/configuration.nix;

Hi there.
Have a question about nixpkgs per node inside a flake. I'm trying following configuration likewise in manual for a hive:

{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/7076110064c09f0b3942f609f2134c1358ef2e50";
  };

  outputs = { nixpkgs, ... }: {
    colmena = {
      meta = {
        nixpkgs = import nixpkgs {
          system = "x86_64-linux";
          overlays = [];
        };

        nodeNixpkgs.desktop = ./nixpkgs-23.05;
      };

      desktop = import ./desktop.nix;
    };
  };
}

But it does not work:

error: Passing a path to Nixpkgs as meta.nodeNixpkgs.pc is no longer accepted with Flakes.
       Please initialize Nixpkgs like the following:

       {
         # ...
         outputs = { nixpkgs, ... }: {
           colmena = {
             meta.nodeNixpkgs.pc = import nixpkgs {
               system = "x86_64-linux"; # Set your desired system here
               overlays = [];
             };
           };
         };
       }

Is it possible somehow to pin specific version of nixpkgs for a host in flake configuration?

Hi there.
Have a question about nixpkgs per node inside a flake. I'm trying following configuration likewise in manual for a hive:

{
  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/7076110064c09f0b3942f609f2134c1358ef2e50";
  };

  outputs = { nixpkgs, ... }: {
    colmena = {
      meta = {
        nixpkgs = import nixpkgs {
          system = "x86_64-linux";
          overlays = [];
        };

        nodeNixpkgs.desktop = ./nixpkgs-23.05;
      };

      desktop = import ./desktop.nix;
    };
  };
}

But it does not work:

error: Passing a path to Nixpkgs as meta.nodeNixpkgs.pc is no longer accepted with Flakes.
       Please initialize Nixpkgs like the following:

       {
         # ...
         outputs = { nixpkgs, ... }: {
           colmena = {
             meta.nodeNixpkgs.desktop = import nixpkgs {
               system = "x86_64-linux"; # Set your desired system here
               overlays = [];
             };
           };
         };
       }

Is it possible somehow to pin specific version of nixpkgs for a host in flake configuration?

There is only example for hive.nix:

    nodeNixpkgs = {
      node-b = ./another-nixos-checkout;
    };

I cannot find out where I should place a path to a nixpkgs when using flake