From dc20d8d81ce6b8a22e6536400690530904add4ee Mon Sep 17 00:00:00 2001
From: Daniel Kempkens <daniel+git@kempkens.io>
Date: Sun, 14 Apr 2024 13:22:59 +0200
Subject: [PATCH] git: move repo maintenance config to encrypted file

---
 agenix/hosts/Styx/config.nix          |   7 +++
 agenix/hosts/Styx/git/maintenance.age | Bin 0 -> 294 bytes
 home/programs/git.nix                 |  63 +++++++++++++++++++++++++-
 secrets.nix                           |   3 ++
 4 files changed, 72 insertions(+), 1 deletion(-)
 create mode 100644 agenix/hosts/Styx/git/maintenance.age

diff --git a/agenix/hosts/Styx/config.nix b/agenix/hosts/Styx/config.nix
index 25b3ca8..5a67921 100644
--- a/agenix/hosts/Styx/config.nix
+++ b/agenix/hosts/Styx/config.nix
@@ -8,6 +8,13 @@
         path = "/etc/nix/netrc";
         mode = "444";
       };
+
+      git-maintenance = {
+        file = ./git/maintenance.age;
+        path = "/Users/daniel/.config/git/maintenance-config";
+        owner = "daniel";
+        group = "staff";
+      };
     };
   };
 }
diff --git a/agenix/hosts/Styx/git/maintenance.age b/agenix/hosts/Styx/git/maintenance.age
new file mode 100644
index 0000000000000000000000000000000000000000..474a0396ccb1116a4320a2fec1cfa991b5749066
GIT binary patch
literal 294
zcmV+>0ondxXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LO>{?aHfJDl
zV@OSKa8pJ^L~?mWX=E@rVrV#1MNL{)a(7s5N^WRVFJx#^GGSMDLP-i^NMcDhYkEp&
zSa(KENKAG@P**WnF<Ny?LuOS-P(fKRH#TW{WqDdpWp4^CEiE8eH+XV+Og2JcO;|Na
zb5<)xPi<^*c2q`gPF7JbQC4F$M0j>tWOp`rR!s^#vmJS2vO`3M&EmLK!5%1e9v2gt
zv_uq|uClZ~jb9HI$CaYp|IZRxA|VG050Zn+XMwvaM?OgLLzEW|LsvlhDV++MKPsCY
snBJ9CC<c;Gx!Ay+NuMjnx5B1`KNE`kBF8T%<|+E3rvpGuKcB4tQ5LLhTL1t6

literal 0
HcmV?d00001

diff --git a/home/programs/git.nix b/home/programs/git.nix
index 804acfa..12a54fb 100644
--- a/home/programs/git.nix
+++ b/home/programs/git.nix
@@ -1,5 +1,9 @@
-{ pkgs, ... }:
+{ pkgs, config, lib, ... }:
 
+let
+  inherit (lib) mkIf;
+  inherit (pkgs.stdenv.hostPlatform) isDarwin;
+in
 {
   home.packages = with pkgs; [
     git-absorb
@@ -73,6 +77,13 @@
       apply = {
         whitespace = "fix";
       };
+
+      maintenance = mkIf isDarwin {
+        strategy = "incremental";
+        repo = let home = config.home.homeDirectory; in [
+          "${home}/.config/nixpkgs"
+        ];
+      };
     };
 
     ignores = [
@@ -83,6 +94,11 @@
     ];
 
     includes = [
+      # Maintenance
+      (mkIf isDarwin {
+        path = "${config.xdg.configHome}/git/maintenance-config";
+      })
+
       # Private
       {
         condition = "hasconfig:remote.*.url:forgejo@git.kempkens.io:*/**";
@@ -157,4 +173,49 @@
   };
 
   home.sessionVariables.GIT_CEILING_DIRECTORIES = "/Users";
+
+  launchd.agents = mkIf isDarwin (
+    let
+      gitExecPath = "${config.programs.git.package}/libexec/git-core";
+      git = "${gitExecPath}/git";
+
+      calendarInterval = schedule:
+        let
+          freq = {
+            "hourly" = [{ Minute = 0; }];
+            "daily" = [{
+              Hour = 0;
+              Minute = 0;
+            }];
+            "weekly" = [{
+              Weekday = 1;
+              Hour = 0;
+              Minute = 0;
+            }];
+          };
+        in
+        freq.${schedule};
+
+      launchdAgent = { schedule }: {
+        enable = true;
+        config = {
+          ProgramArguments = [
+            git
+            "--exec-path=${gitExecPath}"
+            "for-each-repo"
+            "--config=maintenance.repo"
+            "maintenance"
+            "run"
+            "--schedule=${schedule}"
+          ];
+          StartCalendarInterval = calendarInterval schedule;
+        };
+      };
+    in
+    {
+      git-maintenance-hourly = launchdAgent { schedule = "hourly"; };
+      git-maintenance-daily = launchdAgent { schedule = "daily"; };
+      git-maintenance-weekly = launchdAgent { schedule = "weekly"; };
+    }
+  );
 }
diff --git a/secrets.nix b/secrets.nix
index 7558681..3c72aa6 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -108,4 +108,7 @@ in
   "agenix/hosts/neon/forgejo-actions/token.age".publicKeys = neon;
 
   "agenix/hosts/neon/mosquitto/passwordWeewxProxy.age".publicKeys = neon;
+
+  # Styx
+  "agenix/hosts/Styx/git/maintenance.age".publicKeys = [ user-daniel ];
 }