local.nix

{ config, pkgs, ... }:
let
  readJSON = file: builtins.fromJSON
    (builtins.readFile file);
  cfg = config;
in {
  config = {
    nixpkgs.config.packageOverrides = {
      ofborg = (import ../repos/ofborg/default.nix {}).ofborg.rs;
      webhook_api = (import ../repos/ofborg/default.nix {}).ofborg.php;
      logviewer = let
        src = import ../repos/log-viewer/release.nix { inherit pkgs; };
      in pkgs.runCommand "logviewer-site-only" {} ''
        cp -r ${src}/website $out
      '';
      log_api = ../repos/ofborg/log-api;
    };

    services.ofborg.website.domain = "nix.ci";

    services.ofborg.log-viewer.domain = "logs.nix.ci";
    services.ofborg.monitoring.domain = "monitoring.nix.ci";
    services.ofborg.monitoring.alert_manager_receivers = [
      {
        name = "default_receiver";
        pushover_configs = [
          {
            user_key = "";
            token = "";
          }
          {
            user_key = "";
            token = "";
          }
        ];
      }
    ];
    services.ofborg.monitoring.extra_nodes = [
      "aarch64.nixos.community"
    ];

    services.ofborg.webhook.domain = "webhook.nix.ci";
    services.ofborg.webhook.rabbit_username = "";
    services.ofborg.webhook.rabbit_password = "";
    services.ofborg.webhook.github_shared_secret = "";

    services.ofborg.rabbitmq.cookie = "";
    services.ofborg.rabbitmq.domain = "events.nix.ci";
    services.ofborg.rabbitmq.monitoring_username = "";
    services.ofborg.rabbitmq.monitoring_password = "";

    services.ofborg.config_public = readJSON ../repos/ofborg/config.public.json;

    services.ofborg.config_private = {
      runner.known_users = let
          nixpkgsContributors =
            (readJSON ../repos/ofborg/config.known-users.json).runner.known_users;
          extra = readJSON ../repos/ofborg/config.extra-known-users.json;
        in nixpkgsContributors ++ extra;

      rabbitmq = if false
        then {
          ssl = true;
          host = "events.nix.gsc.io"; #"events.nix.ci";
          username = "";
          password = "";
        }
        else {
          ssl = true;
          host = cfg.services.ofborg.rabbitmq.domain;
          username = "";
          password = "";
          virtualhost = "ofborg";
        };

      github = {
        token = "";
      };

      github_app = {
        app_id = ;
        installation_id = ;
        private_key = "/run/keys/github-key";
      };
    };

    deployment.keys.github-key = {
      text = builtins.readFile ./github.key;
      user = config.users.users.ofborg.name;
      group = "keys";
      permissions = "0600";
    };


    users = {
      mutableUsers = false;
    };
  };
}