feat: add basic taskfiles

.taskfiles/nix/Taskfile.yaml

@@ -0,0 +1,45 @@
+---
+version: "3"
+
+vars:
+  host: $HOSTNAME
+
+tasks:
+  apply:
+    desc: Build and apply nix configuration
+    silent: true
+    requires:
+      vars:
+        - host
+    cmds:
+      - task: build
+        vars:
+          host: "{{ .host }}"
+      - task: .prompt_to_continue
+      - sudo nixos-rebuild switch --flake "{{.ROOT_DIR}}/#{{.host}}" --impure
+    preconditions:
+      - sh: which nix
+        msg: "nix not found"
+      - sh: which nixos-rebuild
+        msg: "nixos-rebuild not found"
+
+  build:
+    desc: Build nix configuration
+    silent: true
+    requires:
+      vars:
+        - host
+    cmds:
+      - nixos-rebuild build --flake "{{.ROOT_DIR}}/#{{.host}}" --impure
+      - nvd diff /run/current-system result
+    preconditions:
+      - sh: which nix
+        msg: "nix not found"
+      - sh: which nixos-rebuild
+        msg: "nixos-rebuild not found"
+      - sh: which nvd
+        msg: "nvd not found"
+        
+  .prompt_to_continue:
+    internal: true
+    prompt: Do you want to continue applying this configuration?

.taskfiles/sops/Taskfile.yaml

@@ -0,0 +1,17 @@
+---
+version: "3"
+
+tasks:
+  re-encrypt:
+    desc: Decrypt and re-encrypt all sops secrets
+    silent: true
+    dir: "{{.USER_WORKING_DIR}}"
+    vars:
+      SECRET_FILES:
+        sh: find . -type f -name '*.sops.yaml' ! -name ".sops.yaml"
+    cmds:
+      - for: { var: SECRET_FILES }
+        cmd: |
+          echo "Re-encrypting {{ .ITEM }}"
+          sops --decrypt --in-place "{{ .ITEM }}"
+          sops --encrypt --in-place "{{ .ITEM }}"

Taskfile.yaml

@@ -0,0 +1,16 @@
+---
+version: "3"
+
+includes:
+  sops:
+    taskfile: ".taskfiles/sops"
+    dir: .taskfiles/sops
+  nix:
+    taskfile: ".taskfiles/nix"
+    dir: "{{.ROOT_DIR}}"
+
+tasks:
+  default:
+    silent: true
+    cmds:
+      - task -l