chore: sign commits from gitea actions

.gitea/workflows/flake-update.yaml

@@ -0,0 +1,33 @@
+name: "Flake.lock: update Nix dependencies for development environment only"
+
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    - cron: '00 00 02 1/2 *' # runs the first of day the month every 2 months at 7:00pm local time (midnight UTC)
+
+jobs:
+  nix-flake-update:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: "install nix"
+        uses: cachix/install-nix-action@v31
+
+      - uses: photostructure/git-ssh-signing-action@v1
+        with:
+          ssh-signing-key: ${{ secrets.SSH_SIGNING_KEY }}
+          git-user-name: ${{ vars.GIT_USER_NAME }}
+          git-user-email: ${{ vars.GIT_USER_EMAIL }}
+
+      - name: "update flake.lock"
+        run: |
+          nix flake update --commit-lock-file
+
+      - name: "check flake for errors"
+        run: |
+          nix flake check
+
+      - name: "push update"
+        run: |
+          git push

flake.lock

@@ -2,11 +2,11 @@
   "nodes": {
     "crane": {
       "locked": {
-        "lastModified": 1775839657,
-        "narHash": "sha256-SPm9ck7jh3Un9nwPuMGbRU04UroFmOHjLP56T10MOeM=",
+        "lastModified": 1777149905,
+        "narHash": "sha256-WMC5ktOHtCyJL/jtlf46P+I4Vhw938+oLlSpM8gwQwU=",
         "owner": "ipetkov",
         "repo": "crane",
-        "rev": "7cf72d978629469c4bd4206b95c402514c1f6000",
+        "rev": "60c829383710f7e26454e6677c4d3adbc56dd3b8",
         "type": "github"
       },
       "original": {
@@ -64,17 +64,42 @@
         "type": "github"
       }
     },
-    "root": {
+    "project-templates": {
       "inputs": {
         "crane": "crane",
+        "flake-parts": [
+          "flake-parts"
+        ],
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "treefmt-nix": "treefmt-nix"
+      },
+      "locked": {
+        "lastModified": 1777183464,
+        "narHash": "sha256-aKh428176wYLo4KBAcadw5sqseSPAQ64pN0Qi8f2tXs=",
+        "ref": "refs/heads/master",
+        "rev": "b1a2a8d97b6beae0cbea89908306a496425c610c",
+        "revCount": 14,
+        "type": "git",
+        "url": "ssh://gitea@git.krantz.one/reed/project-templates"
+      },
+      "original": {
+        "type": "git",
+        "url": "ssh://gitea@git.krantz.one/reed/project-templates"
+      }
+    },
+    "root": {
+      "inputs": {
         "flake-parts": "flake-parts",
         "nixpkgs": "nixpkgs",
-        "treefmt-nix": "treefmt-nix"
+        "project-templates": "project-templates"
       }
     },
     "treefmt-nix": {
       "inputs": {
         "nixpkgs": [
+          "project-templates",
           "nixpkgs"
         ]
       },

flake.nix

@@ -6,135 +6,98 @@
 
     flake-parts.url = "github:hercules-ci/flake-parts";
 
-    treefmt-nix = {
-      url = "github:numtide/treefmt-nix";
+    project-templates = {
+      url = "git+https://git.krantz.one/reed/project-templates";
       inputs.nixpkgs.follows = "nixpkgs";
+      inputs.flake-parts.follows = "flake-parts";
     };
-
-    crane.url = "github:ipetkov/crane";
   };
 
   outputs = {
     self,
     flake-parts,
-    treefmt-nix,
-    crane,
+    project-templates,
     ...
   } @ inputs:
     flake-parts.lib.mkFlake {inherit inputs;} {
       imports = [
-        treefmt-nix.flakeModule
+        project-templates.flakeModules.rust
       ];
 
-      systems = ["aarch64-linux" "x86_64-linux" "aarch64-darwin" "x86_64-darwin"];
+      systems = ["aarch64-linux" "x86_64-linux" "aarch64-darwin"];
 
       perSystem = {
-        pkgs,
         lib,
+        config,
+        pkgs,
+        self',
         ...
-      }: let
-        craneLib = crane.mkLib pkgs;
-        src = let
-          unfilteredRoot = ./.;
-        in
-          lib.fileset.toSource {
-            root = unfilteredRoot;
-            fileset = lib.fileset.unions [
-              # Default files from crane (Rust and cargo files)
-              (craneLib.fileset.commonCargoSources unfilteredRoot)
-              (lib.fileset.maybeMissing ./qt-plugin.version)
+      }: {
+        krantz.rust = let
+          craneLib = config.krantz.rust.craneLib;
+
+          # pkgs.qt6.env already includes pkgs.qt6.qtbase
+          # And using `with` to prevent a lot of typing.
+          qtEnv = with pkgs.qt6;
+            env "qt-rshell-${qtbase.version}" [
+              qtdeclarative
+              qttools
             ];
-          };
-        manifest = (lib.importTOML "${src}/Cargo.toml").package;
+        in {
+          enable = true;
+          srcFiltered = let
+            unfilteredRoot = ./.;
+          in
+            lib.fileset.toSource {
+              root = unfilteredRoot;
+              fileset = lib.fileset.unions [
+                # Default files from crane (Rust and cargo files)
+                (craneLib.fileset.commonCargoSources unfilteredRoot)
+                (lib.fileset.maybeMissing ./qt-plugin.version)
+              ];
+            };
 
-        # pkgs.qt6.env already includes pkgs.qt6.qtbase
-        # And using `with` to prevent a lot of typing.
-        qtEnv = with pkgs.qt6;
-          env "qt-rshell-${qtbase.version}" [
-            qtdeclarative
-            qttools
+          runtimeDeps = [
+            qtEnv
           ];
-
-        # runtime dependencies
-        buildInputs = with pkgs; [
-          qtEnv
-        ];
-
-        # build dependencies
-        nativeBuildInputs = with pkgs; [
-          # pkg-config
-          # rustPlatform.bindgenHook
-        ];
-
-        # Build *just* the cargo dependencies, so we can reuse
-        # all of that work (e.g. via cachix) when running in CI
-        cargoArtifacts = craneLib.buildDepsOnly {
-          inherit src buildInputs nativeBuildInputs;
-        };
-      in rec {
-        # Dev Shell that lets you enter an environment with all the necessary utilites
-        # Available through 'nix develop'
-        # Also can be activated automatically if direnv is installed on the system with 'direnv allow'
-        devShells.default = craneLib.devShell {
-          inherit checks;
-
-          # extra tooling dependencies
-          packages = with pkgs; [
+          devDeps = with pkgs; [
             rust-analyzer
             quickshell
           ];
 
-          shellHook =
-            /*
-            bash
-            */
-            ''
-              export QML2_IMPORT_PATH=$(git rev-parse --show-toplevel)/result/:$QML2_IMPORT_PATH
-            '';
-
-          inputsFrom = [packages.default];
-        };
-
-        # Formatter for nix files, available through 'nix fmt'
-        treefmt = {
-          programs.alejandra.enable = true;
-          programs.rustfmt = {
-            enable = true;
-            edition = manifest.edition;
+          devShell.extraAttrs = {
+            shellHook =
+              /*
+              bash
+              */
+              ''
+                export QML2_IMPORT_PATH=$(git rev-parse --show-toplevel)/result/:$QML2_IMPORT_PATH
+              '';
           };
+
+          package.name = "lib";
         };
 
         # Your custom packages
         # Accessible through 'nix build', 'nix shell', 'nix run', etc
-        packages = rec {
-          lib = craneLib.buildPackage {
-            inherit src buildInputs nativeBuildInputs cargoArtifacts;
-          };
-
+        packages = {
           qmlModule = pkgs.runCommand "rshell-qml-dir" {} ''
             mkdir -p $out
 
             cat << EOF > $out/qmldir
             ${''
               module one.krantz.rshell
-              plugin rshell ${lib}/lib
+              plugin rshell ${self'.packages.lib}/lib
             ''}
             EOF
           '';
 
-          default = qmlModule;
-        };
-
-        checks = {
-          clippy = craneLib.cargoClippy {
-            inherit src buildInputs nativeBuildInputs cargoArtifacts;
-            cargoClippyExtraArgs = "-- --deny warnings";
-          };
+          default = self'.packages.qmlModule;
         };
       };
 
       flake = {
-        homeManagerModules.default = {
+        homeModules.default = {
           lib,
           config,
           pkgs,