MythEclipse/asepharyana-hub
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(infra): full Nix migration — all 6 services + CI/CD

Browse Source 
- flake.nix: 6 derivations (hub, scraper, tools-gateway, tools-workers, tools-frontend, llm-api)
- Fetch submodule source via builtins.fetchGit with pinned revs
- Fix cargo HOME/TMPDIR for Nix sandbox permission issues
- Fix llm-api: CMake/Clang deps for llama.cpp-sys2 bindgen
- Add LIBCLANG_PATH, LD_LIBRARY_PATH for Rust bindgen builds
- Systemd units: tools-gateway (3501), tools-frontend (3500), tools-workers, llm-api (8080)
- tools.target for grouped management
- Env configs: /etc/tools/env, /etc/llm-api/env
- GitHub Actions: nix-build.yml — matrix build + nix copy + deploy
- Update Traefik apps.yaml: tools/host.docker.internal:3500, llm-api/host.docker.internal:8080
- iptables: allow Docker→host on 3099, 4091, 3500, 3501, 8080
- Add scripts/nix-deploy.sh for CI/CD deploy step
This commit is contained in:
Asep Haryana
2026-07-30 19:45:43 +07:00
parent 46730ec07d
commit b5596e1398
4 changed files with 107 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flake.nix
+25 -14
View File
@@ -20,22 +20,25 @@
inherit name src;
nativeBuildInputs = with pkgs; [
cacert curl gcc gnumake openssl pkg-config python3
cacert curl gcc gnumake openssl pkg-config python3 libclang
] ++ nativeBuildInputs;
buildInputs = with pkgs; [
nodejs openssl
] ++ buildInputs;
LIBCLANG_PATH = "${pkgs.libclang.lib}/lib";
LD_LIBRARY_PATH = "${pkgs.libclang.lib}/lib:${pkgs.stdenv.cc.cc.lib}/lib";
SSL_CERT_FILE = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
NODE_EXTRA_CA_CERTS = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
NODE_ENV = "production";
HOME = "/tmp";
CARGO_HOME = "/tmp/.cargo";
phases = [ "unpackPhase" "buildPhase" "installPhase" ];
buildPhase = buildScript;
buildPhase = ''
export HOME="$TMPDIR" CARGO_HOME="$TMPDIR/.cargo-${name}"
SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt
'' + buildScript;
installPhase = installScript;
};
@@ -60,7 +63,7 @@
rev = if name == "hub" then "b007ced615dcc78392fc938350a23e8f022d83b7"
else if name == "scraper" then "bc782ae4f825892f2d28901f4a5527f353106db1"
else if name == "tools" then "3956b90c3ce39ffa7ffba8084937f20e11364d6b"
else if name == "llm-api" then "HEAD"
else if name == "llm-api" then "67861f384bd4f64d5236a9608b33c965fbebbc7f"
else "HEAD";
submodules = true;
};
@@ -122,14 +125,14 @@ WRAPPER
installScript = ''
mkdir -p $out/bin
cp backend/target/release/tools-gateway $out/bin/tools-gateway
cp target/release/tools-gateway $out/bin/tools-gateway
'';
};
tools-workers = mkApp {
name = "tools-workers-0.1.0";
src = submoduleSrc "tools";
nativeBuildInputs = cargoDeps ++ [ pkgs.tesseract ];
nativeBuildInputs = cargoDeps ++ [ pkgs.tesseract pkgs.leptonica ];
buildScript = ''
cd backend
@@ -138,8 +141,9 @@ WRAPPER
'';
installScript = ''
cd backend
mkdir -p $out/bin
cp backend/target/release/tools-workers $out/bin/tools-workers
cp target/release/tools-workers $out/bin/tools-workers
'';
};
@@ -158,10 +162,10 @@ WRAPPER
installScript = ''
mkdir -p $out/share/tools-frontend $out/bin
cp -r frontend/.next $out/share/tools-frontend/
cp -r frontend/public $out/share/tools-frontend/ 2>/dev/null || true
cp frontend/package.json $out/share/tools-frontend/
cp -r frontend/node_modules $out/share/tools-frontend/
cp -r .next $out/share/tools-frontend/
cp -r public $out/share/tools-frontend/ 2>/dev/null || true
cp package.json $out/share/tools-frontend/
cp -r node_modules $out/share/tools-frontend/
cat > $out/bin/tools-frontend << WRAPPER
#!${pkgs.runtimeShell}
exec ${pkgs.bun}/bin/bun run --cwd $out/share/tools-frontend start
@@ -173,10 +177,17 @@ WRAPPER
llm-api = mkApp {
name = "llm-api-0.1.0";
src = submoduleSrc "llm-api";
nativeBuildInputs = cargoDeps;
nativeBuildInputs = cargoDeps ++ [ pkgs.cmake pkgs.gcc ];
buildScript = ''
echo "=== Building llm-api ==="
export HOME="$NIX_BUILD_TOP"
export CARGO_HOME="$NIX_BUILD_TOP/.cargo"
export NIX_CFLAGS_COMPILE="-idirafter ${pkgs.stdenv.cc.cc}/include/c++/${pkgs.stdenv.cc.cc.version} -idirafter ${pkgs.stdenv.cc.cc}/include/c++/${pkgs.stdenv.cc.cc.version}/x86_64-unknown-linux-gnu"
export NIX_LDFLAGS="-L${pkgs.stdenv.cc.cc.lib}/lib -lstdc++"
export LD_LIBRARY_PATH="${pkgs.stdenv.cc.cc.lib}/lib:${pkgs.libffi}/lib:$LD_LIBRARY_PATH"
export LLVM_CONFIG_PATH="${pkgs.clang}/bin/llvm-config"
export LIBCLANG_PATH="${pkgs.libclang.lib}/lib"
cargo build --release 2>&1
'';