Add first-class NixOS deployment support #135

New issue

Closed

opened 2026-05-07 11:44:28 -07:00 by jwilger · 0 comments

jwilger commented

2026-05-07 11:44:28 -07:00

Owner

Follow-up from PR #133 review.

Problem

The flake currently exposes the installable auto-review package, the OCI image, and the dev container runner, but it does not expose a first-class NixOS module for operators who want to deploy auto_review through Nix/NixOS.

Scope

Add flake outputs for Nix/NixOS deployment paths as appropriate:
- installable package/program remains available;
- containerized deployment via the existing OCI image is documented and easy to consume;
- systemd/bare deployment can be expressed as a NixOS module/service;
- plain installation without enabling the service is supported.
Keep the Docker/OCI image as the recommended production posture unless the operator explicitly chooses a different isolation boundary.
Document how NixOS users configure credentials without committing secrets.

Acceptance criteria

flake.nix exposes a supported NixOS module or equivalent module output for the gateway service.
Docs show Nix/NixOS examples for containerized deployment, systemd-style service deployment, and installing only the auto-review program.
Tests or flake checks cover the module/options sufficiently to prevent regressions.

Origin: jwilger/auto_review#133 (comment)

Follow-up from PR #133 review. ## Problem The flake currently exposes the installable `auto-review` package, the OCI image, and the dev container runner, but it does not expose a first-class NixOS module for operators who want to deploy `auto_review` through Nix/NixOS. ## Scope - Add flake outputs for Nix/NixOS deployment paths as appropriate: - installable package/program remains available; - containerized deployment via the existing OCI image is documented and easy to consume; - systemd/bare deployment can be expressed as a NixOS module/service; - plain installation without enabling the service is supported. - Keep the Docker/OCI image as the recommended production posture unless the operator explicitly chooses a different isolation boundary. - Document how NixOS users configure credentials without committing secrets. ## Acceptance criteria - `flake.nix` exposes a supported NixOS module or equivalent module output for the gateway service. - Docs show Nix/NixOS examples for containerized deployment, systemd-style service deployment, and installing only the `auto-review` program. - Tests or flake checks cover the module/options sufficiently to prevent regressions. Origin: https://git.johnwilger.com/jwilger/auto_review/pulls/133#issuecomment-3543

jwilger referenced this issue

2026-05-07 11:45:23 -07:00

docs: document single-binary rollout #133

jwilger referenced this issue

2026-05-07 11:45:30 -07:00

docs: document single-binary rollout #133

jwilger referenced this issue from a commit

2026-05-07 11:51:57 -07:00

docs: document single-binary rollout (#133)

jwilger referenced this issue from a pull request that will close it,

2026-05-07 12:57:25 -07:00

feat(deploy): add NixOS deployment module #136