improve rust template

templates/rust/flake.nix

@@ -10,29 +10,118 @@
         nixpkgs.follows = "nixpkgs";
       };
     };
+    advisory-db = {
+      url = "github:rustsec/advisory-db";
+      flake = false;
+    };
+    crane = {
+      url = "github:ipetkov/crane";
+    };
   };
   outputs = {
+    self,
     flake-utils,
     nixpkgs,
     rust-overlay,
+    advisory-db,
+    crane,
     ...
   }:
     flake-utils.lib.eachDefaultSystem (system: let
+      inherit (pkgs) lib;
       pkgs = import nixpkgs {
         inherit system;
         overlays = [(import rust-overlay)];
       };
       rustToolchain = pkgs.rust-bin.fromRustupToolchainFile ./rust-toolchain.toml;
-      rustPlatform = pkgs.makeRustPlatform {
-        cargo = rustToolchain;
-        rustc = rustToolchain;
+      craneLib = (crane.mkLib pkgs).overrideToolchain rustToolchain;
+      srcFilters = path: type:
+        builtins.any (suffix: lib.hasSuffix suffix path) [
+          ".sql"
+          ".diff"
+          ".md"
+          ".adoc"
+          ".json"
+        ]
+        || (craneLib.filterCargoSources path type);
+      src = lib.cleanSourceWith {
+        src = ./.;
+        filter = srcFilters;
       };
+      basicArgs = {
+        inherit src;
+        pname = "rust-demo";
+        strictDeps = true;
+      };
+      cargoArtifacts = craneLib.buildDepsOnly basicArgs;
+      commonArgs =
+        basicArgs
+        // {
+          inherit cargoArtifacts;
+          nativeBuildInputs = with pkgs; [];
+          buildInputs =
+            (with pkgs; [])
+            ++ lib.optional pkgs.stdenv.buildPlatform.isDarwin (with pkgs; [
+              darwin.apple_sdk.frameworks.Security
+            ]);
+          env = {};
+        };
     in {
-      devShells.default = pkgs.mkShell {
+      formatter = pkgs.alejandra;
+      checks = {
+        inherit (self.packages.${system}) default;
+        clippy = craneLib.cargoClippy (commonArgs
+          // {
+            cargoClippyExtraArgs = "--all-targets -- --deny warnings";
+          });
+        doc = craneLib.cargoDoc commonArgs;
+        deny = craneLib.cargoDeny commonArgs;
+        fmt = craneLib.cargoFmt basicArgs;
+        audit = craneLib.cargoAudit {
+          inherit src advisory-db;
+        };
+        nextest = craneLib.cargoNextest (commonArgs
+          // {
+            partitions = 1;
+            partitionType = "count";
+            nativeBuildInputs = [];
+            cargoNextestExtraArgs = "--no-tests pass";
+            env = {
+              CARGO_PROFILE = "dev";
+            };
+          });
+      };
+      packages = rec {
+        rust-demo = craneLib.buildPackage (commonArgs
+          // {
+            inherit
+              (craneLib.crateNameFromCargoToml {
+                cargoToml = "${toString src}/Cargo.toml";
+              })
+              ;
+            doCheck = false;
+            nativeBuildInputs = [];
+            buildInputs = [];
+          });
+        default = rust-demo;
+      };
+      apps.default = flake-utils.lib.mkApp {
+        drv = self.packages."${system}".default;
+      };
+      devShells.default = craneLib.devShell {
         packages = with pkgs; [
           rust-analyzer
-          rustToolchain
+          cargo-audit
+          cargo-deny
+          cargo-watch
+          cargo-nextest
         ];
+        env = {
+          RUST_SRC_PATH = "${rustToolchain}/lib/rustlib/src/rust/library";
+        };
       };
     });
+  nixConfig = {
+    keepOutputs = true;
+  };
 }