serguzim/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Migrate to devenv

Browse source
This commit is contained in:
Tobias Reisinger 2025-06-24 19:35:39 +02:00
parent b098704e23
commit 80a02f959a
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
10 changed files with 269 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

34
devenv.nix Normal file
View file

@ -0,0 +1,34 @@
{ pkgs, lib, config, inputs, ... }:
{
languages.ansible.enable = true;
languages.opentofu.enable = true;
languages.python.enable = true;
languages.python.uv.enable = true;
languages.python.uv.sync.enable = true;
languages.python.venv.enable = true;
packages = [
pkgs.d2
pkgs.dnscontrol
pkgs.minio-client
];
enterShell = ''
set -a
eval "$(ansible-vault view .env)"
set +a
'';
git-hooks.hooks.ansible-lint.enable = true;
git-hooks.hooks.ansible-lint.verbose = true;
git-hooks.hooks.gitleaks = {
enable = true;
name = "Detect hardcoded secrets";
package = pkgs.gitleaks;
description = "Detect hardcoded secrets using Gitleaks";
entry = "gitleaks git --pre-commit --redact --staged --verbose";
pass_filenames = false;
};
}