Separate system from home-manager again

home/baseline/xonsh_footer.xsh

@@ -0,0 +1,131 @@
+# vim: set ft=xonsh :
+
+from tempfile import NamedTemporaryFile, TemporaryDirectory
+
+def bw_unlock():
+    """Unlocks the BitWarden CLI and adds the resulting session code to the
+    current environment variables. Also returns the code for them."""
+    if "BW_SESSION" in ${...}:
+        return $BW_SESSION
+    result = !(bw unlock --raw)
+    while result.returncode != 0:
+        result = !(bw unlock --raw)
+    $BW_SESSION = result.output.strip()
+    return token
+
+def vpn(con, bwname):
+    nmcli c down @(con)
+    bw_unlock()
+    base=$(bw get password @(bwname))
+    secret=$(bw get totp @(bwname))
+    #echo vpn.secrets.password:${base}$(oathtool -b -d "${digits}" -s "${period}" --totp "${secret}") > "${f}"
+
+    with NamedTemporaryFile(delete_on_close=False) as fp:
+        secret = f"vpn.secrets.password:{base}{secret}"
+        fp.write(secret.encode("utf-8"))
+        fp.close()
+        nmcli c up @(con) passwd-file @(fp.name)
+
+def _unlock(args):
+    bw_unlock()
+aliases['unlock'] = _unlock
+
+def _ivr(args):
+    vpn("350Main", "IVR Technology")
+aliases['ivr'] = _ivr
+
+def _ivr2(args):
+    vpn("gregory_hellings@ra.ivrtechnology.com", "IVR Technology")
+aliases['ivr2'] = _ivr2
+
+def _glrestart(args):
+    sudo nixos-container run gitlab -- systemctl restart gitlab
+    sudo nixos-container run gitlab -- systemctl restart nginx
+aliases['glrestart'] = _glrestart
+
+def _aws_creds(args):
+    $AWS_ACCESS_KEY_ID=$(bw get username "AWS Access Key")
+    $AWS_SECRET_ACCESS_KEY=$(bw get password "AWS Access Key")
+aliases['aws_creds'] = _aws_creds
+
+def _rebuild(args):
+    system = uname()
+    hostname = system.nodename
+    if system.sysname == 'Darwin':
+        sudo darwin-rebuild switch
+    else:
+        with TemporaryDirectory() as td:
+            pushd @(td)
+            nom build f"/etc/nixos#nixosConfigurations.{hostname}.config.system.build.toplevel"
+            if g`result`:
+                nvd diff /run/current-system result
+                sudo nixos-rebuild switch
+            popd
+aliases['rebuild'] = _rebuild
+
+def _yaml2json(args, stdin=None, stdout=None):
+    import sys, yaml, json
+    from yaml import CLoader
+    json.dump(yaml.load(stdin, Loader=CLoader), stdout, indent=4)
+aliases['yaml2json'] = _yaml2json
+
+def _py2env(args):
+    vox new @(args[0]) -p /usr/bin/python2
+aliases['py2env'] = _py2env
+
+def _py3env(args):
+    vox new @(args[0])
+aliases['py3env'] = _py3env
+
+def _rundock(args):
+    if Path('/usr/bin/podman').exists():
+        e = 'podman'
+    else:
+        e = 'docker'
+    @(e) exec -ti @(args[0]) /bin/bash
+aliases['rundock'] = _rundock
+
+def _pip_extras(args):
+    import importlib_metadata
+    print(importlib_metadata.metadata(args[0]).get_all('Provides-Extra'))
+aliases['pip_extras'] = _pip_extras
+
+# Container stuff
+def _newdock(args):
+    if Path('/usr/bin/podman').exists():
+        e = 'podman'
+    else:
+        e = 'docker'
+    @(e) run -P --privileged=true -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix -v @(getcwd()):/dmnt -v /etc/pki:/etc/pki:ro -d --name @(args[1]) @(args[0]) /sbin/init
+    rundock @(args[1])
+aliases['newdock'] = _newdock
+
+def _unknown_host(args):
+    sed -i -e @(args[0])d ~/.ssh/known_hosts
+aliases['unknown_host'] = _unknown_host
+
+def _bake(args):
+    from pathlib import Path
+    templates = Path("~/.copier-templates/").expanduser()
+    if not templates.exists():
+        git clone src:greg/copier-templates.git ~/.copier-templates
+    copier copy @(str(templates / args[0])) .
+aliases['bake'] = _bake
+
+def _cleanup(args):
+	sudo nix profile wipe-history --profile ~/.local/state/nix/profiles/home-manager --older-than '30d'
+	sudo nix-collect-garbage --delete-older-than 30d
+	sudo nix store optimise
+aliases['cleanup'] = _cleanup
+
+###
+#
+# Other random nice-to-have things
+#
+###
+
+# Allows identifying JSON as if it was Python by adding some new builtins to the language
+import builtins
+builtins.true = True
+builtins.false = False
+builtins.null = None