81 lines
2 KiB
Nix
81 lines
2 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let cfg = config.system.autoUpgrade; in
|
|
|
|
{
|
|
|
|
options = {
|
|
|
|
system.autoUpgrade = {
|
|
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
Whether to periodically upgrade NixOS to the latest
|
|
version. If enabled, a systemd timer will run
|
|
<literal>nixos-rebuild switch --upgrade</literal> once a
|
|
day.
|
|
'';
|
|
};
|
|
|
|
channel = mkOption {
|
|
type = types.nullOr types.str;
|
|
default = null;
|
|
example = https://nixos.org/channels/nixos-14.12-small;
|
|
description = ''
|
|
The URI of the NixOS channel to use for automatic
|
|
upgrades. By default, this is the channel set using
|
|
<command>nix-channel</command> (run <literal>nix-channel
|
|
--list</literal> to see the current value).
|
|
'';
|
|
};
|
|
|
|
flags = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [];
|
|
example = [ "-I" "stuff=/home/alice/nixos-stuff" "--option" "extra-binary-caches" "http://my-cache.example.org/" ];
|
|
description = ''
|
|
Any additional flags passed to <command>nixos-rebuild</command>.
|
|
'';
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
config = {
|
|
|
|
system.autoUpgrade.flags =
|
|
[ "--no-build-output" ]
|
|
++ (if cfg.channel == null
|
|
then [ "--upgrade" ]
|
|
else [ "-I" "nixpkgs=${cfg.channel}/nixexprs.tar.xz" ]);
|
|
|
|
systemd.services.nixos-upgrade = {
|
|
description = "NixOS Upgrade";
|
|
|
|
restartIfChanged = false;
|
|
unitConfig.X-StopOnRemoval = false;
|
|
|
|
serviceConfig.Type = "oneshot";
|
|
|
|
environment = config.nix.envVars //
|
|
{ inherit (config.environment.sessionVariables) NIX_PATH SSL_CERT_FILE;
|
|
HOME = "/root";
|
|
};
|
|
|
|
path = [ pkgs.gnutar pkgs.xz config.nix.package ];
|
|
|
|
script = ''
|
|
${config.system.build.nixos-rebuild}/bin/nixos-rebuild switch ${toString cfg.flags}
|
|
'';
|
|
|
|
startAt = mkIf cfg.enable "04:40";
|
|
};
|
|
|
|
};
|
|
|
|
}
|