pass inputs in container friendly way

common/flakes.nix

@@ -1,4 +1,4 @@
-{ lib, pkgs, config, inputs, ... }:
+{ lib, pkgs, config, ... }:
 with lib;
 let
   cfg = config.nix.flakes;
@@ -15,7 +15,7 @@ in {
       '';
 
       # pin nixpkgs for system commands such as "nix shell"
-      registry.nixpkgs.flake = inputs.nixpkgs;
+      registry.nixpkgs.flake = config.inputs.nixpkgs;
     };
   };
 }

common/server/drastikbot.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, inputs, ... }:
+{ config, pkgs, lib, ... }:
 
 let
   cfg = config.services.drastikbot;
@@ -9,9 +9,9 @@ let
     format = "other";
 
     srcs = [
-      inputs.drastikbot
+      config.inputs.drastikbot
-      inputs.drastikbot_modules
+      config.inputs.drastikbot_modules
-      inputs.dailybuild_modules
+      config.inputs.dailybuild_modules
     ];
 
     nativeBuildInputs = [ pkgs.makeWrapper ];

common/server/radio.nix

@@ -1,8 +1,8 @@
-{ config, pkgs, lib, inputs, system, ... }:
+{ config, pkgs, lib, ... }:
 
 let
   cfg = config.services.radio;
-  radioPackage = inputs.radio.packages.${system}.radio;
+  radioPackage = config.inputs.radio.packages.${builtins.currentSystem}.radio;
 in {
   options.services.radio = {
     enable = lib.mkEnableOption "enable radio";
@@ -47,7 +47,7 @@ in {
     services.nginx.virtualHosts.${cfg.host} = lib.mkIf cfg.nginx {
       enableACME = true;
       forceSSL = true;
-      locations."/".root = inputs.radio-web;
+      locations."/".root = config.inputs.radio-web;
     };
 
     users.users.${cfg.user} = {

flake.nix

@@ -35,9 +35,12 @@
             inputs.agenix.nixosModules.age
             {
               environment.systemPackages = [ inputs.agenix.defaultPackage.${system} ];
+              
+              # because nixos specialArgs doesn't work for containers... need to pass in inputs a different way
+              options.inputs = lib.mkOption { default = inputs; };
             }
           ];
-          specialArgs = { inherit inputs; inherit system; };
+          # specialArgs = {};
         };
     in
     {

machines/liza/configuration.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, inputs, ... }:
+{ config, pkgs, lib, ... }:
 
 let
   mta-sts-web = {
@@ -145,10 +145,14 @@ in {
     config = {
       imports = [
         ../../common/common.nix
+        config.inputs.agenix.nixosModules.age
       ];
       pia.enable = true;
       nixpkgs.pkgs = pkgs;
 
+      # because nixos specialArgs doesn't work for containers... need to pass in inputs a different way
+      options.inputs = lib.mkOption { default = config.inputs; };
+
       services.drastikbot.enable = true;
       services.radio = {
         enable = true;
@@ -159,23 +163,19 @@ in {
   # load the secret on behalf of the container
   age.secrets."pia-login.conf".file = ../../secrets/pia-login.conf;
 
-  # icecast endpoint
+  # icecast endpoint + website
   services.nginx.virtualHosts."radio.neet.space" = {
     enableACME = true;
     forceSSL = true;
-    locations."/stream.mp3" = {
+    locations = {
+      "/stream.mp3" = {
         proxyPass = "http://172.16.100.2:8001/stream.mp3";
         extraConfig = ''
           add_header Access-Control-Allow-Origin *;
         '';
       };
+      "/".root = config.inputs.radio-web;
     };
-
-  # radio website
-  services.nginx.virtualHosts."radio.neet.space" = {
-    enableACME = true;
-    forceSSL = true;
-    locations."/".root = inputs.radio-web;
   };
 
   services.nginx.virtualHosts."paradigminteractive.agency" = {

machines/mitty/configuration.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, lib, inputs, ... }:
+{ config, pkgs, lib, ... }:
 
 {
   imports =[
@@ -47,11 +47,14 @@
     config = {
       imports = [
         ../../common/common.nix
-        inputs.agenix.nixosModules.age
+        config.inputs.agenix.nixosModules.age
       ];
       pia.enable = true;
       nixpkgs.pkgs = pkgs;
 
+      # because nixos specialArgs doesn't work for containers... need to pass in inputs a different way
+      options.inputs = lib.mkOption { default = config.inputs; };
+
       services.radarr.enable = true;
       services.radarr.openFirewall = true;
       services.bazarr.enable = true;