trusted and tf-nix inputs removed

.envrc

@@ -5,9 +5,6 @@ FLAKE_ARGS=()
 if [[ $(id -un) = kat ]]; then
 	git pull
 fi
-if [[ -e trusted/trusted/flake.nix ]]; then
-	export TRUSTED=1
-fi
 
 source_env_if_exists .envrc.conf
 

.sops.yaml

@@ -4,7 +4,7 @@ keys:
 - &tewi_gen age17haatqc7gpk9t690affyqcvwmhmz0us95en2r7qpqzw29tpq3ffspld0cf
 - &tewi_osh age172nhlv3py990k2rgw64hy27hffmnpv6ssxyu9fepww7zxfgg347qna4gzt
 creation_rules:
-- path_regex: nixos/systems/[^/]+/secrets\.yaml$
+- path_regex: '[^/]+/secrets\.yaml$'
   shamir_threshold: 1
   key_groups:
   - pgp:

ci/flake-cron.nix

@@ -96,7 +96,7 @@ in {
         environment = ["CACHIX_SIGNING_KEY" "GITHUB_REF"];
         command = let
           filteredHosts = ["tewi"];
-          nodeBuildString = concatMapStringsSep " && " (node: "nix build -Lf . network.nodes.${node}.deploy.system -o result-${node} && nix-collect-garbage -d") filteredHosts;
+          nodeBuildString = concatMapStringsSep " && " (node: "nix build -Lf . network.nodes.${node}.system.build.toplevel -o result-${node} && nix-collect-garbage -d") filteredHosts;
         in ''
           # ${toString builtins.currentTime}
           nix flake update

ci/nodes.nix

@@ -63,7 +63,7 @@ with lib; {
     enabledHosts = ["tewi"];
   in
     mapAttrs' (k: nameValuePair "${k}") (genAttrs enabledHosts (host: {
-      tasks.${host}.inputs = channels.nixfiles.network.nodes.${host}.deploy.system;
+      tasks.${host}.inputs = channels.nixfiles.network.nodes.${host}.system.build.toplevel;
     }));
 
   ci.gh-actions.checkoutOptions.submodules = false;

devShell.nix

@@ -18,9 +18,6 @@ let
   '';
   nf-update = pkgs.writeShellScriptBin "nf-update" ''
     nix flake update
-    if [[ -n $TRUSTED ]]; then
-      nix flake lock ./trusted --update-input trusted
-    fi
   '';
   nf-deploy = pkgs.writeShellScriptBin "nf-deploy" ''
     exec /usr/bin/env bash ${./nixos/deploy.sh} "$@"