ci: automate updating flake inputs

.github/workflows/build.yml

@@ -0,0 +1,73 @@
+name: Build all Nix configurations
+on:
+  pull_request:
+    branches: [master]
+  push:
+    branches: [master]
+  workflow_dispatch:
+
+jobs:
+
+  test_nixos_builds:
+    name: Build NixOS configurations
+    runs-on: ubuntu-latest
+    container:
+      image: nixos/nix:latest
+      env:
+        NIX_EXPERIMENTAL_FEATURES: "nix-command flakes"
+    steps:
+      - uses: actions/checkout@v4
+      - uses: cachix/cachix-action@v12
+        with:
+          name: davsanchez
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: Build Darwin VM
+        run: nixos-rebuild build --flake .#darwinVM
+      - name: Build UTM VM
+        run: nixos-rebuild build --flake .#nr-vm-utm
+
+  test_darwin_builds:
+    name: Build Darwin configurations
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v7
+      - uses: cachix/cachix-action@v12
+        with:
+          name: davsanchez
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: Install nix-darwin
+        run: nix run nix-darwin -- switch --flake .#mbp
+      - name: Build Darwin MBP
+        run: darwin-rebuild build --flake .#mbp
+      - name: Build Darwin Mini
+        run: darwin-rebuild build --flake .#mini
+
+  test_home_manager_builds:
+    name: Build Home Manager configurations
+    strategy:
+      matrix:
+        os: 
+          - ubuntu-latest
+          - macos-latest
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v7
+      - uses: cachix/cachix-action@v12
+        with:
+          name: davsanchez
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+      - name: Install home-manager
+        run: nix run home-manager/master -- init --switch
+      - name: Build Home Manager david@mbp
+        if: ${{ matrix.os == 'macos-latest' }}
+        run: home-manager build --flake ".#david@mbp"
+      - name: Build Home Manager david@mini
+        if: ${{ matrix.os == 'macos-latest' }}
+        run: home-manager build --flake ".#david@mini"
+      - name: Build Home Manager davidsanchez@nr-vm
+        if: ${{ matrix.os == 'ubuntu-latest' }}
+        run: home-manager build --flake ".#davidsanchez@nr-vm"

.github/workflows/update-flake-inputs.yml

@@ -0,0 +1,34 @@
+name: Update flake inputs
+on:
+  schedule:
+    # 1st and 15th of each month at midnight UTC
+    - cron: '0 0 1,15 * *'
+  workflow_dispatch:
+
+jobs:
+
+  update_flake_inputs:
+    name: Update flake inputs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up git user
+        run: |
+          git config --global user.name 'DavSanchez's GitHub Actions'
+          git config --global user.email '[email protected]
+      - name: Checkout a new branch
+        run: git switch -c chore/update-flake-inputs
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@v7
+      - name: Update flake inputs
+        run: nix flake update --commit-lock-file
+      - name: Create Pull Request using GH CLI
+        env:
+            GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr create --title "chore: update flake inputs" --body "Update flake inputs"
+      - name: Set branch for auto-merge
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh pr merge --squash --auto --delete-branch
+

home-manager/features/dev/devops.nix

@@ -48,7 +48,8 @@
     ]
     ++ lib.optionals pkgs.stdenv.isDarwin [
       ## Container runtimes on macOS
-      colima
+      colima # Containers
+      tart # VMs
     ];
 
   programs = {

hosts/darwin/mbp.nix

@@ -162,6 +162,7 @@
       "maccy"
       "openemu"
       "openra"
+      "proton-drive"
       "protonmail-bridge"
       "protonvpn"
       "qflipper"
@@ -183,10 +184,7 @@
       "yacreader"
       "zed"
     ];
-    brews = [
-      "ghcup"
-      "tart"
-    ];
+    brews = [];
     masApps = {
       "1Blocker" = 1365531024;
       "Amphetamine" = 937984704;

hosts/darwin/mini.nix

@@ -168,6 +168,7 @@
       "openemu"
       "openra"
       "plex-media-server"
+      "proton-drive"
       "protonmail-bridge"
       "protonvpn"
       "qflipper"
@@ -190,10 +191,7 @@
       "zed"
       "zotero"
     ];
-    brews = [
-      "ghcup"
-      "tart"
-    ];
+    brews = [];
     masApps = {
       "1Blocker" = 1365531024;
       "Amphetamine" = 937984704;

hosts/darwin/nr.nix

@@ -164,10 +164,7 @@
       "warp"
       "wireshark"
     ];
-    brews = [
-      "ghcup"
-      "tart" # VMs on Apple Silicon
-    ];
+    brews = [];
     masApps = {
       "1Blocker" = 1365531024;
       "1Password for Safari" = 1569813296;