self: super:
let
  bins = [ self.nix ];
  repoSrc = "git@hera.m-0.eu:nixos-config";
  configPath = "/etc/nixos";
  systems = [ "apollo" "hera" ];
  homes = self.lib.attrNames (import ../home/modes.nix);
  keys = [ "default" "apollo" "hera" ];
  imports = [ "Control.Exception (onException)" ];
  haskellBody = name: commandline: ''
    main = do
      (configDir:hostname:args) <-  getArgs
      paths <- myNixPath $ toText configDir
      logFile <- mktemp |> captureTrim
      \logFile -> do
        let command = (${commandline}) &!> StdOut &> Append logFile
            failHandler = do
              say [i|### Build failure for ${name} config for #{hostname} ###|]
              cat logFile
        say [i|Trying to build ${name} config for #{hostname}. Logging to #{logFile}.|]
        onException command failHandler
      say [i|Build of ${name} config for #{hostname} was successful.|]
  '';
in {

  test-system-config = self.writeHaskellScript {
    name = "test-system-config";
    inherit bins;
    inherit imports;
  } (haskellBody "system" ''nix_build $ ["<nixpkgs/nixos>", "-A", "system"] ++ paths ++ ["-I", [i|nixos-config=#{configDir}/hosts/#{hostname}/configuration.nix|], "-o", [i|result-system-#{hostname}|]] ++ fmap toString args'');

  test-home-config = self.writeHaskellScript {
    name = "test-home-config";
    inherit bins;
    inherit imports;
  } (haskellBody "home" ''nix_build $ paths ++ [[i|#{configDir}/home/target.nix|], "-A", hostname, "-o", [i|result-home-manager-#{hostname}|]] ++ fmap toString args'');

  test-config = self.writeHaskellScript {
    name = "test-config";
    bins = [
      self.test-system-config
      self.test-home-config
      self.git
      self.niv
      self.git-crypt
    ];
    imports = [ "System.Directory (withCurrentDirectory)" ];
  } ''
    checkout :: IO FilePath
    checkout = do
      (decodeUtf8 -> repoDir) <-  mktemp "-d" |> captureTrim
      git "clone" "${repoSrc}" repoDir
      pure repoDir

    main = do
      bump <- (maybe False (== "bump") . listToMaybe) <$> getArgs
      bracket checkout (rm "-rf") $ \repoDir -> do
        withCurrentDirectory repoDir $ do
          mapM_ (\x -> git_crypt "unlock" ([i|${configPath}/.git/git-crypt/keys/#{x}|] :: String)) ${
            self.haskellList keys
          }
          when bump $ ignoreFailure $ niv "update"
        changed <- (mempty /=) <$> (git "-C" repoDir "status" "--porcelain" |> captureTrim)
        when changed $ do
          git "-C" repoDir "config" "user.email" "maralorn@maralorn.de"
          git "-C" repoDir "config" "user.name" "maralorn (nix-auto-updater)"
          git "-C" repoDir "commit" "-am" "Update dependencies with niv"
          git "-C" repoDir "push" "-f" "origin" "master:version-bump"
        concurrently_
          (mapConcurrently_ (test_system_config repoDir) ${self.haskellList systems})
          (mapConcurrently_ (test_home_config repoDir) ${self.haskellList homes})
        when changed $ do
          git "-C" repoDir "push" "origin" "master:master"
  '';
}