with import <stockholm/lib>; host@{ name, secure ? false, override ? {} }: let builder = if getEnv "dummy_secrets" == "true" then "buildbot" else "tv"; _file = <stockholm> + "/tv/1systems/${name}/source.nix"; in evalSource (toString _file) [ { nixos-config.symlink = "stockholm/tv/1systems/${name}/config.nix"; nixpkgs.git = { # nixos-17.09 ref = mkDefault "d0f0657ca06cc8cb239cb94f430b53bcdf755887"; url = https://github.com/NixOS/nixpkgs; }; secrets.file = getAttr builder { buildbot = toString <stockholm/tv/dummy_secrets>; tv = "/home/tv/secrets/${name}"; }; stockholm.file = toString <stockholm>; } (mkIf (builder == "tv") { secrets-common.file = "/home/tv/secrets/common"; }) (mkIf (builder == "tv" && secure) { secrets-master.file = "/home/tv/secrets/master"; }) override ]