Add ornithologist LXC

flake.nix

@@ -103,5 +103,10 @@
       (mkHost "nextcloud" {
         suite = "server/lxc";
       })
+
+      # Container for managing server flock.
+      (mkHost "ornithologist" {
+        suite = "server/lxc";
+      })
     ];
 }

helpers.nix

@@ -12,13 +12,14 @@ with inputs.nixpkgs.lib; {
     suite ? "",
     docker ? false,
     hostModules ? [],
-  }:
+  }: let
-    {
+    # Secrets directory.
-      nixosConfigurations.${hostname} = nixosSystem rec {
+    secrets = builtins.toString inputs.secrets;
+
     # Architecture.
     system = platform;
 
-        # nixpkgs config.
+    # Stable nixpkgs with overlay.
     pkgs = import nixpkgs {
       inherit system;
 
@@ -38,12 +39,27 @@ with inputs.nixpkgs.lib; {
       ];
     };
 
-        specialArgs = {
+    # deploy-rs.
-          # Pass hostname & inputs to config.
+    deployPkgs = import nixpkgs {
-          inherit inputs hostname;
+      inherit system;
 
-          # Secrets directory.
+      overlays = [
-          secrets = builtins.toString inputs.secrets;
+        deploy-rs.overlays.default
+        (self: super: {
+          deploy-rs = {
+            inherit (pkgs) deploy-rs;
+            lib = super.deploy-rs.lib;
+          };
+        })
+      ];
+    };
+  in {
+    nixosConfigurations.${hostname} = nixosSystem {
+      inherit system pkgs;
+
+      specialArgs = {
+        # Pass variables to config.
+        inherit inputs secrets hostname;
       };
 
       modules =
@@ -83,22 +99,8 @@ with inputs.nixpkgs.lib; {
         ++ optionals (docker == true) [./suites/server/docker] # Enable docker if required.
         ++ (filesystem.listFilesRecursive ./modules); # Custom modules.
     };
-    }
+
-    // optionalAttrs (strings.hasPrefix "server" suite) {
+    deploy.nodes.${hostname} = mkIf (strings.hasPrefix "server" suite) {
-      deploy.nodes.${hostname} = let
-        deployPkgs = import nixpkgs {
-          inherit system;
-          overlays = [
-            deploy-rs.overlays.default
-            (self: super: {
-              deploy-rs = {
-                inherit (pkgs) deploy-rs;
-                lib = super.deploy-rs.lib;
-              };
-            })
-          ];
-        };
-      in {
       hostname = "${hostname}.local";
       profiles.system = {
         user = "root";

hosts/muskduck/default.nix

@@ -39,6 +39,9 @@ with lib; {
     ];
   };
 
+  # Allow emulating aarch64 to build for Raspberry Pi.
+  boot.binfmt.emulatedSystems = ["aarch64-linux"];
+
   # Share Music dir.
   services.samba = {
     enable = true;

hosts/ornithologist/default.nix

@@ -0,0 +1,7 @@
+{pkgs, ...}: {
+  # Allow emulating aarch64 to build for Raspberry Pi.
+  boot.binfmt.emulatedSystems = ["aarch64-linux"];
+
+  # Install some packages.
+  environment.systemPackages = with pkgs; [deploy-rs];
+}

suites/desktop/default.nix

@@ -26,9 +26,6 @@ with lib; {
       "udev.log_priority=3"
       "rd.systemd.show_status=auto"
     ];
-
-    # Allow emulating aarch64 to build for Raspberry Pi.
-    binfmt.emulatedSystems = ["aarch64-linux"];
   };
 
   # Enable smart card support (for YubiKey).