refactor: remove cfg-if-fix overlay

modules/blacksky/community.nix

···
-# This module configures the Blacksky Community web client service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.community = {
-    enable = mkEnableOption "Blacksky Community web client service.";
-    port = mkOption {
-      type = types.port;
-      default = 80;
-      description = "Port for the Blacksky Community web client.";
-    };
-    hostName = mkOption {
-      type = types.str;
-      default = "localhost";
-      description = "Host name for the Blacksky Community web client.";
-    };
-  };
-
-  config = mkIf config.blacksky.community.enable {
-    services.nginx = {
-      enable = true;
-      virtualHosts.${config.blacksky.community.hostName} = {
-        enable = true;
-        root = "${pkgs.blacksky.community}/share/nginx/html";
-        listen = [{
-          addr = "127.00.1";
-          port = config.blacksky.community.port;
-        }];
-      };
-    };
-  };
-}

modules/blacksky/default.nix

···
-# This module aggregates all Blacksky AT Protocol services.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  imports = [
-    ./rsky/pds.nix
-    ./rsky/relay.nix
-    ./rsky/feedgen.nix
-    ./rsky/satnav.nix
-    ./rsky/firehose.nix
-    ./rsky/jetstream-subscriber.nix
-    ./rsky/labeler.nix
-    # Individual service modules will be imported here
-  ];
-
-  options.blacksky = {
-    enable = mkEnableOption "Blacksky AT Protocol services";
-  };
-
-  config = mkIf config.blacksky.enable {
-    blacksky.pds.enable = false;
-    blacksky.feedgen.enable = false;
-    blacksky.satnav.enable = false;
-    blacksky.firehose.enable = false;
-    blacksky.jetstream-subscriber.enable = false;
-    blacksky.labeler.enable = false;
-  };
-}

modules/blacksky/rsky/feedgen.nix

···
-# This module configures the Blacksky Feed Generator service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.feedgen = {
-    enable = mkEnableOption "Blacksky Feed Generator service.";
-    port = mkOption {
-      type = types.port;
-      default = 8001;
-      description = "Port for the Blacksky Feed Generator service.";
-    };
-    # Add other options specific to the feedgen service
-  };
-
-  config = mkIf config.blacksky.feedgen.enable {
-    systemd.services.blacksky-feedgen = {
-      description = "Blacksky Feed Generator service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.feedgen}/bin/rsky-feedgen";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "blacksky-feedgen";
-        # Add other environment variables or arguments as needed by rsky-feedgen
-      };
-    };
-  };
-}

modules/blacksky/rsky/firehose.nix

···
-# This module configures the Blacksky Firehose service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.firehose = {
-    enable = mkEnableOption "Blacksky Firehose service.";
-    port = mkOption {
-      type = types.port;
-      default = 8003;
-      description = "Port for the Blacksky Firehose service.";
-    };
-    # Add other options specific to the firehose service
-  };
-
-  config = mkIf config.blacksky.firehose.enable {
-    systemd.services.blacksky-firehose = {
-      description = "Blacksky Firehose service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.firehose}/bin/rsky-firehose";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "blacksky-firehose";
-        # Add other environment variables or arguments as needed by rsky-firehose
-      };
-    };
-  };
-}

modules/blacksky/rsky/jetstream-subscriber.nix

···
-# This module configures the Blacksky Jetstream Subscriber service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.jetstreamSubscriber = {
-    enable = mkEnableOption "Blacksky Jetstream Subscriber service.";
-    port = mkOption {
-      type = types.port;
-      default = 8004;
-      description = "Port for the Blacksky Jetstream Subscriber service.";
-    };
-    # Add other options specific to the jetstream subscriber service
-  };
-
-  config = mkIf config.blacksky.jetstreamSubscriber.enable {
-    systemd.services.blacksky-jetstream-subscriber = {
-      description = "Blacksky Jetstream Subscriber service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.jetstreamSubscriber}/bin/rsky-jetstream-subscriber";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "blacksky-jetstream-subscriber";
-        # Add other environment variables or arguments as needed by rsky-jetstream-subscriber
-      };
-    };
-  };
-}

modules/blacksky/rsky/labeler.nix

···
-# This module configures the Blacksky Labeler service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.labeler = {
-    enable = mkEnableOption "Blacksky Labeler service.";
-    port = mkOption {
-      type = types.port;
-      default = 8005;
-      description = "Port for the Blacksky Labeler service.";
-    };
-    # Add other options specific to the labeler service
-  };
-
-  config = mkIf config.blacksky.labeler.enable {
-    systemd.services.blacksky-labeler = {
-      description = "Blacksky Labeler service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.labeler}/bin/rsky-labeler";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "blacksky-labeler";
-        # Add other environment variables or arguments as needed by rsky-labeler
-      };
-    };
-  };
-}

modules/blacksky/rsky/pds.nix

···
-# This module configures the Blacksky PDS service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.pds = {
-    enable = mkEnableOption "Blacksky PDS service.";
-    port = mkOption {
-      type = types.port;
-      default = 3000;
-      description = "Port for the Blacksky PDS service.";
-    };
-    dataDir = mkOption {
-      type = types.str;
-      default = "/var/lib/blacksky-pds";
-      description = "Data directory for the Blacksky PDS service.";
-    };
-  };
-
-  config = mkIf config.blacksky.pds.enable {
-    systemd.services.blacksky-pds = {
-      description = "Blacksky PDS service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.pds}/bin/rsky-pds";
-        Restart = "always";
-        DynamicUser = true;
-      # Ensure data directory exists and has correct permissions
-      preStart = ''
-        mkdir -p ${config.blacksky.pds.dataDir}
-        chown -R blacksky-pds:blacksky-pds ${config.blacksky.pds.dataDir}
-      '';
-    };
-  };
-}

modules/blacksky/rsky/relay.nix

···
-# This module configures the Blacksky Relay service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.relay = {
-    enable = mkEnableOption "Blacksky Relay service.";
-    port = mkOption {
-      type = types.port;
-      default = 8000;
-      description = "Port for the Blacksky Relay service.";
-    };
-    # Add other options specific to the relay service, e.g., certs, private_key
-  };
-
-  config = mkIf config.blacksky.relay.enable {
-    systemd.services.blacksky-relay = {
-      description = "Blacksky Relay service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.relay}/bin/rsky-relay";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "blacksky-relay";
-        # Add other environment variables or arguments as needed by rsky-relay
-      };
-    };
-  };
-}

modules/blacksky/rsky/satnav.nix

···
-# This module configures the Blacksky Satnav service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-{
-  options.blacksky.satnav = {
-    enable = mkEnableOption "Blacksky Satnav service.";
-    port = mkOption {
-      type = types.port;
-      default = 8002;
-      description = "Port for the Blacksky Satnav service.";
-    };
-    # Satnav is a web UI, so it might need a web server configuration
-    # For simplicity, we'll just run the binary directly for now.
-  };
-
-  config = mkIf config.blacksky.satnav.enable {
-    systemd.services.blacksky-satnav = {
-      description = "Blacksky Satnav service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${pkgs.blacksky.satnav}/bin/rsky-satnav";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "blacksky-satnav";
-        # Add other environment variables or arguments as needed by rsky-satnav
-      };
-    };
-  };
-}

modules/default.nix

···
 {
   imports = [
-    ./blacksky
-    ./microcosm
   ];
-}
+}

modules/microcosm/constellation.nix

···
-# This module configures the Microcosm Constellation service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-constellation;
-  microcosmPkgs = pkgs.microcosm; # Access the packages we built
-in
-{
-  options.services.microcosm-constellation = {
-    enable = mkEnableOption "Microcosm Constellation service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.constellation;
-      description = "The Microcosm Constellation package to use.";
-    };
-    port = mkOption {
-      type = types.port;
-      default = 8080; # Example default port
-      description = "The port on which the Constellation service listens.";
-    };
-    jetstream = mkOption {
-      type = types.str;
-      description = "Jetstream server to connect to.";
-    };
-    data = mkOption {
-      type = types.str;
-      default = "/var/lib/microcosm-constellation";
-      description = "Where to store data on disk.";
-    };
-    backend = mkOption {
-      type = types.str;
-      default = "memory";
-      description = "Storage backend to use.";
-    };
-    # Add other service-specific options here (e.g., databaseUrl, logLevel)
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-constellation = {
-      description = "Microcosm Constellation Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/main --jetstream ${cfg.jetstream} --data ${cfg.data} --backend ${cfg.backend}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-constellation";
-        # Add other systemd options as needed (e.g., working directory, environment variables)
-      };
-    };
-  };
-}

modules/microcosm/default.nix

···
-# This module aggregates all Microcosm services.
-
-{ pkgs, ... }:
-
-{
-  imports = [
-    ./constellation.nix
-    ./spacedust.nix
-    ./slingshot.nix
-    ./ufos.nix
-    ./jetstream.nix
-    ./who-am-i.nix
-    ./quasar.nix
-    ./pocket.nix
-    ./reflector.nix
-  ];
-}

modules/microcosm/jetstream.nix

···
-# This module configures the Microcosm Jetstream service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-jetstream;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-jetstream = {
-    enable = mkEnableOption "Microcosm Jetstream service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.jetstream;
-      description = "The Microcosm Jetstream package to use.";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-jetstream = {
-      description = "Microcosm Jetstream Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/jetstream"; # This command likely needs adjustment
-        Restart = "always";
-        User = "microcosm-jetstream";
-        Group = "microcosm-jetstream";
-      };
-      users.users.microcosm-jetstream = {
-        isSystem = true;
-        group = "microcosm-jetstream";
-      };
-      users.groups.microcosm-jetstream = {
-        isSystem = true;
-      };
-    };
-  };
-}

modules/microcosm/pocket.nix

···
-# This module configures the Microcosm Pocket service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-pocket;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-pocket = {
-    enable = mkEnableOption "Microcosm Pocket service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.pocket;
-      description = "The Microcosm Pocket package to use.";
-    };
-    db = mkOption {
-      type = types.str;
-      description = "path to the sqlite db file";
-    };
-    domain = mkOption {
-      type = types.str;
-      description = "the domain for serving a did doc";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-pocket = {
-      description = "Microcosm Pocket Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/pocket --db ${cfg.db} --domain ${cfg.domain}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-pocket";
-      };
-    };
-  };
-}

modules/microcosm/quasar.nix

···
-# This module configures the Microcosm Quasar service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-quasar;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-quasar = {
-    enable = mkEnableOption "Microcosm Quasar service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.quasar;
-      description = "The Microcosm Quasar package to use.";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-quasar = {
-      description = "Microcosm Quasar Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/quasar";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-quasar";
-      };
-    };
-  };
-}

modules/microcosm/reflector.nix

···
-# This module configures the Microcosm Reflector service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-reflector;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-reflector = {
-    enable = mkEnableOption "Microcosm Reflector service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.reflector;
-      description = "The Microcosm Reflector package to use.";
-    };
-    id = mkOption {
-      type = types.str;
-      description = "The DID document service ID to serve";
-    };
-    type = mkOption {
-      type = types.str;
-      description = "Service type";
-    };
-    serviceEndpoint = mkOption {
-      type = types.str;
-      description = "The HTTPS endpoint for the service";
-    };
-    domain = mkOption {
-      type = types.str;
-      description = "The parent domain";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-reflector = {
-      description = "Microcosm Reflector Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/reflector --id ${cfg.id} --type ${cfg.type} --service-endpoint ${cfg.serviceEndpoint} --domain ${cfg.domain}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-reflector";
-      };
-    };
-  };
-}

modules/microcosm/slingshot.nix

···
-# This module configures the Microcosm Slingshot service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-slingshot;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-slingshot = {
-    enable = mkEnableOption "Microcosm Slingshot service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.slingshot;
-      description = "The Microcosm Slingshot package to use.";
-    };
-    jetstream = mkOption {
-      type = types.str;
-      description = "Jetstream server to connect to.";
-    };
-    cacheDir = mkOption {
-      type = types.str;
-      description = "where to keep disk caches";
-    };
-    domain = mkOption {
-      type = types.str;
-      description = "the domain pointing to this server";
-    };
-    acmeContact = mkOption {
-      type = types.str;
-      description = "email address for letsencrypt contact";
-    };
-    certs = mkOption {
-      type = types.str;
-      description = "a location to cache acme https certs";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-slingshot = {
-      description = "Microcosm Slingshot Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/slingshot --jetstream ${cfg.jetstream} --cache-dir ${cfg.cacheDir} --domain ${cfg.domain} --acme-contact ${cfg.acmeContact} --certs ${cfg.certs}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-slingshot";
-      };
-    };
-  };
-}

modules/microcosm/spacedust.nix

···
-# This module configures the Microcosm Spacedust service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-spacedust;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-spacedust = {
-    enable = mkEnableOption "Microcosm Spacedust service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.spacedust;
-      description = "The Microcosm Spacedust package to use.";
-    };
-    jetstream = mkOption {
-      type = types.str;
-      description = "Jetstream server to connect to.";
-    };
-    jetstreamNoZstd = mkOption {
-      type = types.bool;
-      default = false;
-      description = "don't request zstd-compressed jetstream events";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-spacedust = {
-      description = "Microcosm Spacedust Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/spacedust --jetstream ${cfg.jetstream} ${lib.optionalString cfg.jetstreamNoZstd "--jetstream-no-zstd"}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-spacedust";
-      };
-    };
-  };
-}

modules/microcosm/ufos.nix

···
-# This module configures the Microcosm UFOs service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-ufos;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-ufos = {
-    enable = mkEnableOption "Microcosm UFOs service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs.ufos;
-      description = "The Microcosm UFOs package to use.";
-    };
-    jetstream = mkOption {
-      type = types.str;
-      description = "Jetstream server to connect to.";
-    };
-    data = mkOption {
-      type = types.str;
-      description = "Location to store persist data to disk";
-    };
-    jetstreamForce = mkOption {
-      type = types.bool;
-      default = false;
-      description = "allow changing jetstream endpoints";
-    };
-    jetstreamNoZstd = mkOption {
-      type = types.bool;
-      default = false;
-      description = "don't request zstd-compressed jetstream events";
-    };
-    pauseWriter = mkOption {
-      type = types.bool;
-      default = false;
-      description = "DEBUG: don't start the jetstream consumer or its write loop";
-    };
-    backfill = mkOption {
-      type = types.bool;
-      default = false;
-      description = "Adjust runtime settings like background task intervals for efficient backfill";
-    };
-    pauseRw = mkOption {
-      type = types.bool;
-      default = false;
-      description = "DEBUG: force the rw loop to fall behind by pausing it todo: restore this";
-    };
-    reroll = mkOption {
-      type = types.bool;
-      default = false;
-      description = "reset the rollup cursor, scrape through missed things in the past (backfill)";
-    };
-    jetstreamFixture = mkOption {
-      type = types.bool;
-      default = false;
-      description = "DEBUG: interpret jetstream as a file fixture";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-ufos = {
-      description = "Microcosm UFOs Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/ufos --jetstream ${cfg.jetstream} --data ${cfg.data} ${lib.optionalString cfg.jetstreamForce "--jetstream-force"} ${lib.optionalString cfg.jetstreamNoZstd "--jetstream-no-zstd"} ${lib.optionalString cfg.pauseWriter "--pause-writer"} ${lib.optionalString cfg.backfill "--backfill"} ${lib.optionalString cfg.pauseRw "--pause-rw"} ${lib.optionalString cfg.reroll "--reroll"} ${lib.optionalString cfg.jetstreamFixture "--jetstream-fixture"}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-ufos";
-      };
-    };
-  };
-}

modules/microcosm/who-am-i.nix

···
-# This module configures the Microcosm Who-Am-I service.
-
-{ config, lib, pkgs, ... }:
-
-with lib;
-
-let
-  cfg = config.services.microcosm-who-am-i;
-  microcosmPkgs = pkgs.microcosm;
-in
-{
-  options.services.microcosm-who-am-i = {
-    enable = mkEnableOption "Microcosm Who-Am-I service.";
-    package = mkOption {
-      type = types.package;
-      default = microcosmPkgs."who-am-i";
-      description = "The Microcosm Who-Am-I package to use.";
-    };
-    appSecret = mkOption {
-      type = types.str;
-      description = "secret key from which the cookie-signing key is derived";
-    };
-    oauthPrivateKey = mkOption {
-      type = types.str;
-      description = "path to at-oauth private key (PEM pk8 format)";
-    };
-    jwtPrivateKey = mkOption {
-      type = types.str;
-      description = "path to jwt private key (PEM pk8 format)";
-    };
-    baseUrl = mkOption {
-      type = types.str;
-      description = "this server's client-reachable base url, for oauth redirect + jwt check";
-    };
-    bind = mkOption {
-      type = types.str;
-      default = "127.0.0.1:9997";
-      description = "host:port to bind to on startup";
-    };
-    dev = mkOption {
-      type = types.bool;
-      default = false;
-      description = "Enable dev mode";
-    };
-    allowedHosts = mkOption {
-      type = types.listOf types.str;
-      default = [];
-      description = "Hosts who are allowed to one-click auth";
-    };
-    # Add other service-specific options here
-  };
-
-  config = mkIf cfg.enable {
-    systemd.services.microcosm-who-am-i = {
-      description = "Microcosm Who-Am-I Service";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        ExecStart = "${cfg.package}/bin/who-am-i --app-secret ${cfg.appSecret} --oauth-private-key ${cfg.oauthPrivateKey} --jwt-private-key ${cfg.jwtPrivateKey} --base-url ${cfg.baseUrl} --bind ${cfg.bind} ${lib.optionalString cfg.dev "--dev"} ${lib.concatMapStringsSep " " (host: "--allow_host " + host) cfg.allowedHosts}";
-        Restart = "always";
-        DynamicUser = true;
-        StateDirectory = "microcosm-who-am-i";
-      };
-    };
-  };
-}

overlays/cfg-if-fix.nix

···
-final: prev: {
-  vendorCargoDeps = args:
-    let
-      previousOverride = args.overrideVendorCargoPackage or (_pkg: drv: drv);
-      newOverride = pkg: drv:
-        let
-          drv' = if pkg.name == "cfg-if" then
-                   drv.overrideAttrs (old: {
-                     unpackPhase = ''
-                       tar -x -z -f $src
-                     '';
-                   })
-                 else
-                   drv;
-        in
-        previousOverride pkg drv';
-    in
-    prev.vendorCargoDeps (args // { overrideVendorCargoPackage = newOverride; });
-}

overlays/default.nix

···
 {
-  cfg-if-fix = import ./cfg-if-fix.nix;
 }

pkgs/blacksky/default.nix

···
-{ pkgs, craneLib, buildYarnPackage, ... }:
-
-import ./rsky { inherit pkgs craneLib buildYarnPackage; }

pkgs/blacksky/rsky/default.nix

···
-{ pkgs, craneLib, buildYarnPackage }:
-
-{
-  pds = craneLib.buildPackage rec {
-    pname = "rsky-pds";
-    version = "0.1.0"; # Placeholder version, should be updated from rsky's Cargo.toml
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder, should be updated to a specific commit or tag
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-0000000000000000000000000000000000000000000000000000000000000000=";
-
-    # Build only the rsky-pds binary
-
-    cargoBuildFlags = [ "--package rsky-pds --bin rsky-pds" ];
-    cargoInstallFlags = [ "--package rsky-pds --bin rsky-pds" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Personal Data Server (PDS) from rsky";
-      homepage = "https://github.com/atproto-nix/nur"; # Placeholder
-      license = licenses.mit; # Placeholder
-      maintainers = with maintainers; [ ]; # Placeholder
-    };
-  };
-
-  relay = craneLib.buildPackage rec {
-    pname = "rsky-relay";
-    version = "0.1.0"; # Placeholder version
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="; # Placeholder
-
-    cargoBuildFlags = [ "--package rsky-relay --bin rsky-relay" ];
-    cargoInstallFlags = [ "--package rsky-relay --bin rsky-relay" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Relay from rsky";
-      homepage = "https://github.com/atproto-nix/nur";
-      license = licenses.mit;
-      maintainers = with maintainers; [ ];
-    };
-  };
-
-  feedgen = craneLib.buildPackage rec {
-    pname = "rsky-feedgen";
-    version = "0.1.0"; # Placeholder version
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA="; # Placeholder
-
-    cargoBuildFlags = [ "--package rsky-feedgen --bin rsky-feedgen" ];
-    cargoInstallFlags = [ "--package rsky-feedgen --bin rsky-feedgen" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Feed Generator from rsky";
-      homepage = "https://github.com/atproto-nix/nur";
-      license = licenses.mit;
-      maintainers = with maintainers; [ ];
-    };
-  };
-
-  satnav = craneLib.buildPackage rec {
-    pname = "rsky-satnav";
-    version = "0.1.0"; # Placeholder version
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-0000000000000000000000000000000000000000000000000000000000000000="; # Placeholder, will be updated by Nix
-
-    cargoBuildFlags = [ "--package rsky-satnav --bin rsky-satnav" ];
-    cargoInstallFlags = [ "--package rsky-satnav --bin rsky-satnav" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Satnav from rsky";
-      homepage = "https://github.com/atproto-nix/nur";
-      license = licenses.mit;
-      maintainers = with maintainers; [ ];
-    };
-  };
-
-  firehose = craneLib.buildPackage rec {
-    pname = "rsky-firehose";
-    version = "0.2.1"; # Version from Cargo.toml
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-0000000000000000000000000000000000000000000000000000000000000000="; # Placeholder
-
-    cargoBuildFlags = [ "--package rsky-firehose --bin rsky-firehose" ];
-    cargoInstallFlags = [ "--package rsky-firehose --bin rsky-firehose" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Firehose subscriber from rsky";
-      homepage = "https://github.com/atproto-nix/nur";
-      license = licenses.mit;
-      maintainers = with maintainers; [ ];
-    };
-  };
-
-  jetstreamSubscriber = craneLib.buildPackage rec {
-    pname = "rsky-jetstream-subscriber";
-    version = "0.1.0"; # Version from Cargo.toml
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-0000000000000000000000000000000000000000000000000000000000000000="; # Placeholder
-
-    cargoBuildFlags = [ "--package rsky-jetstream-subscriber --bin rsky-jetstream-subscriber" ];
-    cargoInstallFlags = [ "--package rsky-jetstream-subscriber --bin rsky-jetstream-subscriber" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Jetstream Subscriber from rsky";
-      homepage = "https://github.com/atproto-nix/nur";
-      license = licenses.mit;
-      maintainers = with maintainers; [ ];
-    };
-  };
-
-  labeler = craneLib.buildPackage rec {
-    pname = "rsky-labeler";
-    version = "0.1.3"; # Version from Cargo.toml
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "rsky";
-      rev = "main"; # Placeholder
-      hash = "sha256-nqBe20MCeNrSVxLVxiYc7iCFaBdf5Vf1p/i0D/aS8oY=";
-    };
-    cargoHash = "sha256-0000000000000000000000000000000000000000000000000000000000000000="; # Placeholder
-
-    cargoBuildFlags = [ "--package rsky-labeler --bin rsky-labeler" ];
-    cargoInstallFlags = [ "--package rsky-labeler --bin rsky-labeler" ];
-    tarFlags = "--no-same-owner";
-
-    meta = with pkgs.lib; {
-      description = "AT Protocol Labeler from rsky";
-      homepage = "https://github.com/atproto-nix/nur";
-      license = licenses.mit;
-      maintainers = with maintainers; [ ];
-    };
-  };
-
-  community = pkgs.buildYarnPackage rec {
-    pname = "blacksky.community";
-    version = "1.109.0"; # Version from package.json
-
-    src = pkgs.fetchFromGitHub {
-      owner = "blacksky-algorithms";
-      repo = "blacksky.community";
-      # TODO: Update 'rev' to a specific commit hash or release tag for reproducible builds.
-      rev = "main";
-      # TODO: Update 'hash' to the correct SHA256 hash of the fetched source.
-      # You can obtain the correct hash by setting it to an empty string, running nix-build,
-      # and then copying the hash from the error message.
-      hash = "sha256-W0mXqED9geNKJSPGJhUdJZ2voMOMDCXX1T4zn3GZKlY=";
-    };
-
-    yarnLock = "yarn.lock"; # Specify the yarn.lock file
-
-    buildPhase = ''
-      yarn build-web
-    '';
-
-    installPhase = ''
-      mkdir -p $out/share/nginx/html
-      cp -r web-build/* $out/share/nginx/html
-    '';
-
-    meta = with pkgs.lib; {
-      description = "Blacksky Community Web Client";
-      # Placeholder, update with actual homepage if available.
-      homepage = "https://github.com/blacksky-algorithms/blacksky.community";
-      # Placeholder, update with actual license if available. Assuming MIT for now.
-      license = licenses.mit;
-      # Placeholder, add actual maintainers.
-      maintainers = with maintainers; [ ];
-    };
-  };
-}

pkgs/microcosm/default.nix

···
-{ pkgs, craneLib }:
-let
-  src = pkgs.fetchFromGitHub {
-    owner = "at-microcosm";
-    repo = "microcosm-rs";
-    rev = "b0a66a102261d0b4e8a90d34cec3421073a7b728";
-    sha256 = "sha256-swdAcsjRWnj9abmnrce5LzeKRK+LHm8RubCEIuk+53c=";
-  };
-
-  commonEnv = {
-    LIBCLANG_PATH = pkgs.lib.makeLibraryPath [ pkgs.llvmPackages.libclang.lib ];
-    OPENSSL_NO_VENDOR = "1";
-    OPENSSL_LIB_DIR = "${pkgs.lib.getLib pkgs.openssl}/lib";
-    OPENSSL_INCLUDE_DIR = "${pkgs.lib.getDev pkgs.openssl}/include";
-    BINDGEN_EXTRA_CLANG_ARGS = pkgs.lib.concatStringsSep " " (["-I${pkgs.llvmPackages.libclang.lib}/lib/clang/${pkgs.lib.versions.major pkgs.llvmPackages.libclang.version}/include"] ++ pkgs.lib.optional pkgs.stdenv.isLinux "-I${pkgs.glibc.dev}");
-    ZSTD_SYS_USE_PKG_CONFIG = "1";
-    CC = "${pkgs.llvmPackages.clang}/bin/clang";
-    CXX = "${pkgs.llvmPackages.clang}/bin/clang++";
-    PKG_CONFIG_PATH = "${pkgs.zstd.dev}/lib/pkgconfig:${pkgs.lz4.dev}/lib/pkgconfig";
-  };
-
-  nativeInputs = with pkgs; [
-    pkg-config
-    perl
-  ];
-
-  buildInputs = with pkgs; [
-    zstd
-    lz4
-    rocksdb
-    openssl
-  ];
-
-  cargoArtifacts = craneLib.buildDepsOnly {
-    inherit src;
-    pname = "microcosm-rs-deps";
-    nativeBuildInputs = nativeInputs;
-    buildInputs = buildInputs;
-    env = commonEnv;
-  };
-
-  members = [
-    "links"
-    "constellation"
-    "jetstream"
-    "ufos"
-    "ufos/fuzz"
-    "spacedust"
-    "who-am-i"
-    "slingshot"
-    "quasar"
-    "pocket"
-    "reflector"
-  ];
-
-  buildPackage = member:
-    let
-      packageName = if member == "ufos/fuzz" then "ufos-fuzz" else member;
-    in
-    craneLib.buildPackage {
-      inherit src cargoArtifacts;
-      pname = packageName;
-      version = "0.1.0";
-      cargoExtraArgs = "--package ${packageName}";
-      nativeBuildInputs = nativeInputs;
-      buildInputs = buildInputs ++ (pkgs.lib.optional (member == "pocket") pkgs.sqlite);
-      env = commonEnv;
-    };
-
-  packages = pkgs.lib.genAttrs members (member: buildPackage member);
-
-in
-packages // {
-  default = pkgs.linkFarm "microcosm-rs" (pkgs.lib.mapAttrsToList (name: value:
-    let
-      linkName = if name == "ufos/fuzz" then "ufos-fuzz" else name;
-    in
-    { name = linkName; path = value; }
-  ) packages);
-}