Add CI and pre-commit hooks for nix files

.envrc

@@ -0,0 +1 @@
+use_flake

.github/workflows/flake-check.yml

@@ -0,0 +1,16 @@
+name: "Lint"
+
+on:
+ push:
+ pull_request:
+
+jobs:
+ checks:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - uses: cachix/install-nix-action@v25
+ with:
+ nix_path: nixpkgs=channel:nixpkgs-unstable
+ - run: |
+ nix flake check -L

.gitignore

@@ -8,3 +8,6 @@
 
 # Nix build outputs
 result
+
+# pre-commit
+.pre-commit-config.yaml

flake.nix

@@ -0,0 +1,29 @@
+{
+ description = "NixOS Infra";
+
+ inputs = {
+ nixpkgs.url = "github:NIxOS/nixpkgs";
+ pre-commit-hooks = {
+ url = "github:cachix/pre-commit-hooks.nix";
+ inputs.nixpkgs.follows = "nixpkgs";
+ };
+ flake-utils.url = "github:numtide/flake-utils";
+ };
+
+ outputs = { self, nixpkgs, pre-commit-hooks, flake-utils }:
+ flake-utils.lib.eachSystem [ "aarch64-linux" "x86_64-linux" ] (system: {
+ checks = {
+ pre-commit-check = pre-commit-hooks.lib.${system}.run {
+ src = ./.;
+ hooks = {
+ deadnix.enable = true;
+ statix.enable = true;
+ };
+ };
+ };
+ devShells.default = nixpkgs.legacyPackages.${system}.mkShell {
+ inherit (self.checks.${system}.pre-commit-check) shellHook;
+ };
+ }
+ );
+}