0xrsydn/dotfiles
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nix fmt, sops encrypted

Browse source
This commit is contained in:
Rasyidan Akbar F. 2025-10-01 00:32:55 +07:00
commit 9630e66cce
3 changed files with 113 additions and 49 deletions
Download patch file Download diff file Expand all files Collapse all files

51
modules/home/rsydn/base.nix
View file

@ -47,5 +47,54 @@
rsydn.languages.enable = lib.mkDefault true;
rsydn.secrets.enable = lib.mkDefault true;
rsydn.secrets = {
enable = lib.mkDefault true;
defaultSopsFile = ../../../secrets/local-ai-tokens.sops.yaml;
secrets = {
"openai-api-key" = {
format = "yaml";
key = "OPENAI_API_KEY";
};
"openrouter-api-key" = {
format = "yaml";
key = "OPENROUTER_API_KEY";
};
"zai-api-key" = {
format = "yaml";
key = "ZAI_API_KEY";
};
"moonshot-api-key" = {
format = "yaml";
key = "MOONSHOT_API_KEY";
};
"anthropic-api-key" = {
format = "yaml";
key = "ANTHROPIC_API_KEY";
};
"exa-api-key" = {
format = "yaml";
key = "EXA_API_KEY";
};
"fal-api-key" = {
format = "yaml";
key = "FAL_API_KEY";
};
"groq-api-key" = {
format = "yaml";
key = "GROQ_API_KEY";
};
"firecrawl-api-key" = {
format = "yaml";
key = "FIRECRAWL_API_KEY";
};
};
};
}

81
modules/home/rsydn/devtools/ai-tools.nix
View file

@ -1,14 +1,7 @@
{ config, lib, pkgs, inputs, ... }:
let
inherit (lib)
mkEnableOption
mkOption
types
mkIf
concatMap
unique
warn
escapeShellArg;
mkEnableOption mkOption types mkIf concatMap unique warn escapeShellArg;
cfg = config.rsydn.aiTools;
nodePackages = if builtins.hasAttr "nodePackages_latest" pkgs then
@ -51,13 +44,8 @@ let
claudeDefault =
choosePackage [ (getNodePackage "@anthropic-ai/claude-code") ];
toolOption =
{ name
, description
, defaultPackage
, extraOptions ? { }
, extraDefaults ? { }
}:
toolOption = { name, description, defaultPackage, extraOptions ? { }
, extraDefaults ? { } }:
mkOption {
type = types.submodule {
options = {
@ -113,39 +101,39 @@ let
}
];
zaiWrapperPackages =
let
claudeCfg = cfg.claude;
zaiCfg = claudeCfg.zai or { enable = false; };
in if claudeCfg.enable && zaiCfg.enable then
if claudeCfg.package != null then
let
claudeExe = lib.getExe claudeCfg.package;
commandName = zaiCfg.commandName;
baseUrl = zaiCfg.baseUrl;
model = zaiCfg.model;
tokenEnvVar = zaiCfg.tokenEnvVar;
in [
(pkgs.writeShellApplication {
name = commandName;
text = ''
if [ -z "''${${tokenEnvVar}:-}" ]; then
echo "${commandName}: environment variable ${tokenEnvVar} is not set" >&2
exit 1
fi
zaiWrapperPackages = let
claudeCfg = cfg.claude;
zaiCfg = claudeCfg.zai or { enable = false; };
in if claudeCfg.enable && zaiCfg.enable then
if claudeCfg.package != null then
let
claudeExe = lib.getExe claudeCfg.package;
commandName = zaiCfg.commandName;
baseUrl = zaiCfg.baseUrl;
model = zaiCfg.model;
tokenEnvVar = zaiCfg.tokenEnvVar;
in [
(pkgs.writeShellApplication {
name = commandName;
text = ''
if [ -z "''${${tokenEnvVar}:-}" ]; then
echo "${commandName}: environment variable ${tokenEnvVar} is not set" >&2
exit 1
fi
export ANTHROPIC_BASE_URL=${escapeShellArg baseUrl}
export ANTHROPIC_AUTH_TOKEN="''${${tokenEnvVar}}"
export ANTHROPIC_MODEL=${escapeShellArg model}
export ANTHROPIC_BASE_URL=${escapeShellArg baseUrl}
export ANTHROPIC_AUTH_TOKEN="''${${tokenEnvVar}}"
export ANTHROPIC_MODEL=${escapeShellArg model}
exec ${claudeExe} "$@"
'';
})
]
else
warn "rsydn.aiTools.claude: Z.AI wrapper requested but package is null" [ ]
exec ${claudeExe} "$@"
'';
})
]
else
[ ];
warn "rsydn.aiTools.claude: Z.AI wrapper requested but package is null"
[ ]
else
[ ];
in {
options.rsydn.aiTools = {
@ -225,6 +213,7 @@ in {
};
config = mkIf cfg.enable {
home.packages = unique (toolPackages ++ zaiWrapperPackages ++ cfg.extraPackages);
home.packages =
unique (toolPackages ++ zaiWrapperPackages ++ cfg.extraPackages);
};
}