cv/default.nix

148 lines
4.3 KiB
Nix

{ system ? builtins.currentSystem
, version ? "latest"
, rev ? ""
, commitTime ? "1970-01-01T00:00:00+00:00"
, repoUrl ? ""
}:
let
nixpkgs = builtins.fetchTarball {
url = "https://github.com/NixOS/nixpkgs/archive/4ecab3273592f27479a583fb6d975d4aba3486fe.tar.gz";
sha256 = "10wn0l08j9lgqcw8177nh2ljrnxdrpri7bp0g7nvrsn9rkawvlbf";
};
pkgs = import nixpkgs { inherit system; };
devshell = import
(pkgs.fetchFromGitHub {
owner = "numtide";
repo = "devshell";
rev = "5143ea68647c4cf5227e4ad2100db6671fc4c369";
sha256 = "sha256-9goJTd05yOyD/McaMqZ4BUB8JW+mZMnZQJZ7VQ6C/Lw=";
})
{ nixpkgs = pkgs; };
nodejs = pkgs.nodejs_20;
go = pkgs.go_1_20;
dream2nix = pkgs.dream2nix;
buildGoModule = pkgs.buildGoModule.override { inherit go; };
golangci-lint = pkgs.golangci-lint.override { inherit buildGoModule; };
src = pkgs.lib.cleanSource ./.;
uiSrc = pkgs.lib.cleanSource ./app/frontend;
package = pkgs.buildNpmPackage {
name = "ui";
buildInputs = [
nodejs
];
pname = "ui";
src = uiSrc;
buildPhase = ''
npm run check
npm run build
mkdir $out
cp -a dist $out
'';
npmInstallFlags = "--no-audit --no-progress --no-fund";
npmDepsHash = "sha256-p4rTpy0t8aajbubvtF1TA83/FFqvfKEOPBb5T0ZRfQY=";
npmPackFlags = [ "--ignore-scripts" ];
};
server = buildGoModule {
inherit src version;
pname = "cv";
postPatch = ''
rm -rf app/server/internal/files/data/public
mkdir -p app/server/internal/files/data/public
touch app/server/internal/files/data/public/.gitkeep
cp -Tr ${package}/dist/ app/server/internal/files/data/public/
chmod +w -R app/server/internal/files/data/public
sed -i 's#<script#<script nonce="{{ .CspNonce }}"#g' app/server/internal/files/data/public/index.html
'';
CGO_ENABLED = 0;
ldflags = "-s -w -X gopkg.c3c.cz/cv/app/server/internal/version.Tag=${version} -X gopkg.c3c.cz/cv/app/server/internal/version.Commit=${rev} -X gopkg.c3c.cz/cv/app/server/internal/version.commitTime=${commitTime} -X gopkg.c3c.cz/cv/app/server/internal/version.repoUrl=${repoUrl}";
subPackages = [ "app/server" ];
vendorSha256 = "sha256-BkwXD8n62+p639vTLwXpCiY8cqYtCjWxaa5tuw78u5g=";
overrideModAttrs = (_: {
impureEnvVars = pkgs.lib.fetchers.proxyImpureEnvVars ++ [ "GIT_PROXY_COMMAND" "SOCKS_SERVER" "GOPROXY" ];
});
};
in
{
image = pkgs.dockerTools.streamLayeredImage {
name = "cv";
tag = version;
config = {
Env = [ "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt" ];
Entrypoint = [ "${server}/bin/server" ];
};
};
shell = devshell.mkShell {
devshell = {
name = "c3c-cv";
packages = [
go
golangci-lint
pkgs.prefetch-npm-deps
nodejs
# keep pinned nixpkgs so they are not garbage collected
pkgs.path
];
};
commands = [
{
name = "lint";
help = "run golangci-lint and npm run check";
command = ''
cd ''$PRJ_ROOT
golangci-lint run --sort-results --out-format tab
npm --prefix app/frontend run check
'';
}
{
name = "fmt";
help = "Format and fix found issues";
command = ''
cd ''$PRJ_ROOT
golangci-lint run --sort-results --out-format tab --fix
npm --prefix app/frontend run fix
'';
}
{
name = "pre-commit";
help = "Format and fix found issues";
command = ''
cd ''$PRJ_ROOT
golangci-lint run --sort-results --out-format tab --fix
npm --prefix ''$PRJ_ROOT/app/frontend run fix
echo "Calculating npm deps"
HASH=''$(prefetch-npm-deps ''$PRJ_ROOT/app/frontend/package-lock.json 2> /dev/null)
[[ ''$HASH = sha256* ]] && echo "Hash is ''$HASH"
[[ ''$HASH != sha256* ]] && echo "Failed" && exit 137
# Replace the first occurence of npmDepsHash with the new calculated hash in this file
sed -i "0,/npmDepsHash =/{s@npmDepsHash = .*@npmDepsHash = \"''$HASH\";@}" ''$PRJ_ROOT/default.nix
'';
}
{
name = "dev";
help = "Starts the javascript project in dev";
command = ''
npm --prefix ''$PRJ_ROOT/app/frontend run dev
'';
}
];
};
}