flake.lock

@@ -190,6 +190,22 @@
         "type": "github"
       }
     },
+    "nixpkgs-krypton": {
+      "locked": {
+        "lastModified": 1713297878,
+        "narHash": "sha256-hOkzkhLT59wR8VaMbh1ESjtZLbGi+XNaBN6h49SPqEc=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "66adc1e47f8784803f2deb6cacd5e07264ec2d5c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
     "nixpkgs-stable": {
       "locked": {
         "lastModified": 1713434076,
@@ -247,6 +263,7 @@
         "nixos-exporter": "nixos-exporter",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs_3",
+        "nixpkgs-krypton": "nixpkgs-krypton",
         "solid-xmpp-alarm": "solid-xmpp-alarm",
         "sops-nix": "sops-nix",
         "ssh-to-age": "ssh-to-age"

flake.nix

@@ -1,6 +1,7 @@
 {
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs-krypton.url = "github:NixOS/nixpkgs/nixos-unstable";
     nixos-hardware.url = "github:NixOS/nixos-hardware/master";
     bij = {
       url = "git+https://git.clerie.de/clerie/bij.git";
@@ -35,7 +36,6 @@
   outputs = { self, nixpkgs, nixos-hardware, chaosevents, fernglas, nixos-exporter, solid-xmpp-alarm, ssh-to-age, ... }@inputs: let
     lib = import ./lib inputs;
     helper = lib.flake-helper;
-    localNixpkgs = import ./flake/nixpkgs.nix inputs;
   in {
     clerie.hosts = {
       aluminium = {
@@ -94,18 +94,30 @@
 
     colmena = {
       meta = {
-        nixpkgs = localNixpkgs.x86_64-linux;
+        nixpkgs = import nixpkgs {
+          system = "x86_64-linux";
+        };
       };
     } // helper.mapToColmenaHosts self.nixosConfigurations;
 
     overlays = {
-      nixfilesInputs = import ./flake/overlay.nix inputs;
       clerie = import ./pkgs/overlay.nix;
       default = self.overlays.clerie;
     };
 
     packages = nixpkgs.lib.genAttrs [ "x86_64-linux" "aarch64-linux" ] (system: let
-      pkgs = localNixpkgs.${system};
+      pkgs = import nixpkgs {
+        inherit system;
+        overlays = [
+          self.overlays.clerie
+          (_: _: {
+            inherit (chaosevents.packages.${system})
+              chaosevents;
+            inherit (ssh-to-age.packages.${system})
+              ssh-to-age;
+           })
+        ];
+      };
     in {
       inherit (pkgs)
         clerie-keys

flake/nixpkgs.nix

@@ -1,17 +0,0 @@
-{ self
-, nixpkgs
-, ...
-}@inputs:
-
-let
-  mkNixpkgs = { system, ... }@args: 
-    import nixpkgs {
-      inherit system;
-      overlays = [
-        self.overlays.nixfilesInputs
-        self.overlays.clerie
-      ];
-    };
-
-in
-  nixpkgs.lib.genAttrs [ "x86_64-linux" "aarch64-linux" ] (system: mkNixpkgs { inherit system; })

flake/overlay.nix

@@ -1,14 +0,0 @@
-{ self
-, bij
-, chaosevents
-, ssh-to-age
-, ...
-}@inputs:
-final: prev: {
-  inherit (bij.packages.${final.system})
-    bij;
-  inherit (chaosevents.packages.${final.system})
-    chaosevents;
-  inherit (ssh-to-age.packages.${final.system})
-    ssh-to-age;
-}

lib/flake-helper.nix

@@ -1,4 +1,4 @@
-{ self, nixpkgs, fernglas, fieldpoc, nixos-exporter, solid-xmpp-alarm, sops-nix, ... }@inputs:
+{ self, nixpkgs, bij, chaosevents, fernglas, fieldpoc, nixos-exporter, solid-xmpp-alarm, sops-nix, ... }@inputs:
 
 rec {
   generateNixosSystem = {
@@ -26,8 +26,13 @@ rec {
       ../users/clerie
       ({ ... }: {
         nixpkgs.overlays = [
-          self.overlays.nixfilesInputs
           self.overlays.clerie
+          (_: _: {
+            inherit (bij.packages."${system}")
+              bij;
+            inherit (chaosevents.packages."x86_64-linux")
+              chaosevents;
+           })
         ];
         clerie.monitoring = nixpkgs.lib.attrsets.optionalAttrs (group != null) { serviceLevel = group; };
       })