Initial, broken

flake.nix

@@ -3,17 +3,27 @@
 
   inputs = {
     nixpkgs.url = "nixpkgs/nixos-21.05";
+
     home-manager.url = "github:nix-community/home-manager/release-21.05";
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
+
+    fudo-secrets.url = "path:/state/secrets";
   };
 
-  outputs = { self, nixpkgs, home-manager, ... }: {
+  outputs = { self, nixpkgs, home-manager, fudo-secrets, ... }: {
 
     nixosConfigurations = let
-      hostlib = import ./lib/hosts.nix { lib = nixpkgs.lib; };
-      hosts = hostlib.base-host-config ./config/hosts;
-    in nixpkgs.lib.mapAttrs (hostname: hostOpts: let
+      lib = nixpkgs.lib;
+
+      hostlib = import ./lib/hosts.nix { inherit lib; };
+
+      hosts = lib.filterAttrs (hostname: hostOpts:
+        hostOpts.nixos-system) (hostlib.base-host-config ./config/hosts);
+
+      build-timestamp = self.sourceInfo.lastModified;
+    in lib.mapAttrs (hostname: hostOpts: let
       pkgs = import nixpkgs {
+        system = hostOpts.arch;
         config = {
           allowUnfree = true;
           permittedInsecurePackages = [
@@ -24,10 +34,15 @@
           (import ./fudo-pkgs/overlay.nix)
         ];
       };
-      in import ./initialize.nix {
-        inherit hostname pkgs;
-        home-manager-module = import "${home-manager}/nixos";
-        include-secrets = true;
-      }) hosts;
+    in lib.nixosSystem {
+      system = hostOpts.arch;
+
+      modules = [
+        "${home-manager}/nixos"
+        (import ./initialize.nix {
+          inherit hostname pkgs build-timestamp fudo-secrets;
+        })
+      ];
+    }) hosts;
   };
 }