feat: automated deployment (#7)

Co-authored-by: Floweynt <50057682+Floweynt@users.noreply.github.com>
Reviewed-on: #7

configuration.nix

@@ -4,12 +4,26 @@
   lib,
   hostInfo,
   customPkgs,
+  flakeRev,
   ...
 }:
 let
   inherit (hostInfo) paths;
 in
 {
+  imports = [ ./modules/autodeploy.nix ];
+
+  services.server-autodeploy = {
+    enable = true;
+    giteaUrl = "https://git.floweytf.com/";
+    giteaRepo = "server/server-config";
+    tokenFile = "${hostInfo.paths.secrets}/gitea-autodeploy-token";
+    allowedSigners = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPaGpTX3EzfezVc2nl3MgsKVamYYP2h2VJaRny8pZkvi flowey@arch"
+    ];
+    stateDir = hostInfo.paths.config;
+  };
+
   assertions =
     let
       isMounted =
@@ -47,6 +61,14 @@ in
 
   time.timeZone = "UTC";
   system.stateVersion = "26.05";
+  system.nixos.label =
+    let
+      labelFile = ./.nixos-label;
+    in
+    if builtins.pathExists labelFile then
+      lib.removeSuffix "\n" (builtins.readFile labelFile)
+    else
+      flakeRev;
 
   nix = {
     settings = {