Introduce NixOS and devShells (#19)

* initial functional flake with inputs and s

* added devshell and nixos config

* Fixed nixos config (probably)

* Nix config finally works

* set up deploy-rs

* added nix fmt to CI

* added nix build to CI

.envrc.example

@@ -0,0 +1 @@
+use flake

.github/workflows/ci.yaml

@@ -45,6 +45,13 @@ jobs:
     with:
       cargo-profile: ${{ needs.check-inputs.outputs.cargo-profile }}
 
+  nix:
+    name: Nix
+    needs: check-inputs
+    uses: ./.github/workflows/nix.yaml
+    with:
+      deploy: ${{ needs.check-inputs.outputs.is-default-branch == 'true' }}
+
   container:
     name: Container
     needs: [rust, check-inputs]

.github/workflows/nix.yaml

@@ -0,0 +1,36 @@
+name: Nix CI
+on:
+  workflow_call:
+    inputs:
+      deploy:
+        required: true
+        type: boolean
+
+jobs:
+  fmt:
+    name: Check Nix Formatting
+    runs-on: ubuntu-24.04
+    steps:
+    - uses: actions/checkout@v4
+    - uses: cachix/install-nix-action@v30
+    - uses: cachix/cachix-action@v15
+      with:
+        name: nexus-ci
+        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+    - run: nix develop -c nixpkgs-fmt --check .
+
+  build:
+    name: Build NixOS config
+    runs-on: ubuntu-24.04
+    steps:
+    - uses: actions/checkout@v4
+    - uses: cachix/install-nix-action@v30
+    - uses: cachix/cachix-action@v15
+      with:
+        name: nexus-ci
+        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+    - name: Build NixOS machines
+      run: |
+        nix build .#nixosConfigurations.servers-us-east-1.config.formats.linode
+    - name: Run Flake Checks
+      run: nix flake check

.gitignore

@@ -1,15 +1,22 @@
+# Editor stuff
 /.idea
 /.vscode
+*.swp
+
+# Build artifacts
 /target
 **/artifacts
 .intentionally-empty-file.o
 
-*.swp
+# Macos BS
 .DS_Store
 
-# For local development
+# Nix stuff
 .direnv
 .envrc
+result
+
+# For local development
 my-config.toml
 
 # SQLite