feat: universal Nix setup with phase architecture, testing, and CI

.assets/provision/check_distro.sh → .assets/check/check_distro.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 : '
-.assets/provision/check_distro.sh | jq
-.assets/provision/check_distro.sh array
+.assets/check/check_distro.sh | jq
+.assets/check/check_distro.sh array
 '
 set -euo pipefail
 
@@ -18,11 +18,11 @@ declare -A state=(
   ["git_email"]=$([ -n "$(git config --global --get user.email 2>/dev/null)" ] && echo true || echo false)
   ["gtkd"]=$(grep -Fqw "dark" /etc/profile.d/gtk_theme.sh 2>/dev/null && echo true || echo false)
   ["k8s_base"]=$([ -x '/usr/bin/kubectl' ] && echo true || echo false)
+  ["nix"]=$([ -d /nix/store ] && echo true || echo false)
   ["k8s_dev"]=$([ -x '/usr/local/bin/helm' ] && echo true || echo false)
   ["k8s_ext"]=$([ -x '/usr/local/bin/k3d' ] && echo true || echo false)
   ["oh_my_posh"]=$([ -x '/usr/bin/oh-my-posh' ] && echo true || echo false)
-  ["pixi"]=$([ -x "$HOME/.pixi/bin/pixi" ] && echo true || echo false)
-  ["python"]=$([ -x "$HOME/.local/bin/uv" ] && echo true || echo false)
+  ["python"]=$({ [ -x "$HOME/.local/bin/uv" ] || [ -x "$HOME/.nix-profile/bin/uv" ]; } && echo true || echo false)
   ["pwsh"]=$([ -x '/usr/bin/pwsh' ] && echo true || echo false)
   ["shell"]=$([ -x '/usr/bin/rg' ] && echo true || echo false)
   ["ssh_key"]=$([ -f "$HOME/.ssh/id_ed25519" ] && [ -f "$HOME/.ssh/id_ed25519.pub" ] && echo true || echo false)
@@ -47,7 +47,7 @@ is_excluded() {
 # check if array parameter is provided
 if [ "${1:-}" = 'array' ]; then
   # keys to exclude
-  exclude_keys=('git_user' 'git_email' 'ssh_key' 'systemd' 'wslg' 'wsl_boot' 'gtkd')
+  exclude_keys=('git_user' 'git_email' 'nix' 'ssh_key' 'systemd' 'wslg' 'wsl_boot' 'gtkd')
   # print only the keys with true values, excluding specified keys
   for key in "${!state[@]}"; do
     if [ "${state[$key]}" = true ] && ! is_excluded "$key"; then

.assets/provision/check_dns.sh → .assets/check/check_dns.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
 : '
-.assets/provision/check_dns.sh
+.assets/check/check_dns.sh
 '
 getent hosts github.com >/dev/null 2>&1 && echo true || echo false

.assets/provision/check_ssl.sh → .assets/check/check_ssl.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 : '
-sudo .assets/provision/check_ssl.sh
+sudo .assets/check/check_ssl.sh
 '
 
 # install curl if not available
@@ -27,12 +27,13 @@ if ! command -v curl >/dev/null 2>&1; then
 fi
 
 # check SSL connectivity
+: "${NIX_ENV_TLS_PROBE_URL:=https://www.google.com}"
 if command -v curl >/dev/null 2>&1; then
-  curl -sS https://www.google.com >/dev/null 2>&1 && echo true || echo false
+  curl -sS "$NIX_ENV_TLS_PROBE_URL" >/dev/null 2>&1 && echo true || echo false
 elif command -v wget >/dev/null 2>&1; then
-  wget -q --spider https://www.google.com 2>&1 && echo true || echo false
+  wget -q --spider "$NIX_ENV_TLS_PROBE_URL" 2>&1 && echo true || echo false
 elif command -v python3 >/dev/null 2>&1; then
-  python3 -c "import urllib.request; urllib.request.urlopen('https://www.google.com')" 2>/dev/null && echo true || echo false
+  python3 -c "import urllib.request; urllib.request.urlopen('$NIX_ENV_TLS_PROBE_URL')" 2>/dev/null && echo true || echo false
 else
   echo unknown
 fi

.assets/config/bash_cfg/aliases.sh

@@ -1,3 +1,6 @@
+# guard: skip when sourced by non-bash shells (e.g. dash via /etc/profile.d/)
+[ -z "$BASH_VERSION" ] && return 0
+
 #region aliases
 export SWD=$(pwd)
 alias swd="echo $SWD"
@@ -99,5 +102,4 @@ fi
 
 [ -x /usr/bin/rg ] && alias rg='rg --ignore-case' || true
 [ -x /usr/bin/fastfetch ] && alias ff='fastfetch' || true
-[ -x /usr/local/bin/tfswitch ] && alias tfswitch="tfswitch --bin='$HOME/.local/bin/terraform'" || true
 #endregion

.assets/config/bash_cfg/aliases_git.sh

@@ -1,9 +1,9 @@
 #region functions
-function git_current_branch {
+git_current_branch() {
   git branch --show-current
 }
 
-function git_resolve_branch {
+git_resolve_branch() {
   case "$1" in
   '')
     pattern='(^|/)dev(|el|elop|elopment)$|(^|/)ma(in|ster)$|(^|/)trunk$'
@@ -30,12 +30,12 @@ function git_resolve_branch {
   [ -n "$br" ] && echo "$br" || echo "$pattern"
 }
 
-function gsw {
+gsw() {
   br=$(git_resolve_branch $1)
   git switch "$(git_resolve_branch "$br")"
 }
 
-function grmb {
+grmb() {
   br=$(git_resolve_branch $1)
   git reset "$(git merge-base "$(grt)"/"$br" HEAD)"
 }