wire-server/flake.nix at develop · wireapp/wire-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
{
  description = "A very basic flake";

  inputs = {
    self.submodules = true;
    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-25.11";
    nixpkgs_24_11.url = "github:nixos/nixpkgs?ref=nixos-24.11";
    nixpkgs-unstable.url = "github:nixos/nixpkgs?ref=nixos-unstable";
    flake-utils.url = "github:numtide/flake-utils";
    tom-bombadil = {
      url = "github:wireapp/tom-bombadil";
      inputs.nixpkgs.follows = "nixpkgs";
      inputs.flake-utils.follows = "flake-utils";
    };
    sbomnix = {
      url = "github:tiiuae/sbomnix/v1.7.4";
      inputs.nixpkgs.follows = "nixpkgs";
    };

    bloodhound = {
      url = "github:wireapp/bloodhound?ref=wire-fork";
      flake = false;
    };
    hedis = {
      url = "github:wireapp/hedis?ref=wire-changes";
      flake = false;
    };

    http-client = {
      url = "github:wireapp/http-client?ref=master";
      flake = false;
    };

    hspec-wai = {
      url = "github:wireapp/hspec-wai?ref=body-contains";
      flake = false;
    };

    cql = {
      url = "github:wireapp/cql?ref=develop";
      flake = false;
    };

    cql-io = {
      url = "github:wireapp/cql-io?ref=control-conn";
      flake = false;
    };

    wai-predicates = {
      url = "github:wireapp/wai-predicates?ref=develop";
      flake = false;
    };

    tasty = {
      url = "github:wireapp/tasty?ref=mangoiv/full-stacktrace-rebased";
      flake = false;
    };

    servant-openapi3 = {
      url = "github:wireapp/servant-openapi3?ref=required-request-bodies";
      flake = false;
    };

    postie = {
      url = "github:alexbiehl/postie?ref=master";
      flake = false;
    };

    tinylog = {
      url = "github:wireapp/tinylog?ref=wire-fork";
      flake = false;
    };

    tasty-ant-xml = {
      url = "github:wireapp/tasty-ant-xml?ref=drop-console-formatting_rebased";
      flake = false;
    };

    text-icu-translit = {
      url = "github:wireapp/text-icu-translit?ref=master";
      flake = false;
    };

    amazonka = {
      url = "github:brendanhay/amazonka?rev=a7d699be1076e2aad05a1930ca3937ffea954ad8";
      flake = false;
    };
  };

  outputs = inputs@{ nixpkgs, nixpkgs_24_11, nixpkgs-unstable, flake-utils, tom-bombadil, sbomnix, ... }:
    flake-utils.lib.eachDefaultSystem (system:
      let
        pkgs = import nixpkgs {
          inherit system;
          overlays = [
            (import ./nix/overlay.nix)
            (import ./nix/overlay-docs.nix)
          ];
        };
        pkgs_24_11 = import nixpkgs_24_11 {
          inherit system;
        };
        pkgs_unstable = import nixpkgs-unstable {
          inherit system;
        };
        bomDependenciesDrv = tom-bombadil.lib.${system}.bomDependenciesDrv;
        wireServerPkgs = import ./nix { inherit pkgs pkgs_24_11 inputs bomDependenciesDrv; };
      in
      {
        # profileEnv wireServer docs docsEnv mls-test-cli nginz;
        packages = {
          inherit (wireServerPkgs) pkgs profileEnv wireServer docs docsEnv mls-test-cli nginz;
        };
        devShells = {
          default = pkgs.mkShell {
            packages = wireServerPkgs.wireServer.devEnvPkgs;
          };
        };
        # Shell environment for generating Software Bill of Materials (SBOMs)
        # Used on CI.
        devShells.sbom = pkgs.mkShell {
          packages = [
            # Shell and core utilities
            pkgs.bash
            pkgs.coreutils
            pkgs.findutils
            pkgs.git

            # JSON/YAML processing
            pkgs.jq
            pkgs.yq

            # Network tools
            pkgs.curl

            # Container and SBOM tools
            pkgs.cyclonedx-cli
            pkgs_unstable.syft
            pkgs.kubernetes-helm
            pkgs.helmfile
            sbomnix.packages.${system}.default
          ] ++ pkgs.lib.optionals pkgs.stdenv.isLinux [
            # Linux-only container tools
            pkgs.skopeo
            pkgs.docker
            pkgs.docker-compose
          ];
          meta = {
            description = "Development shell with tools for SBOM generation";
          };
        };
      }
    );
}