Managed with Home Manager.
Secrets are managed by SOPS. Place AGE private keys in the file .sops/keys
, and edit files with sops $path
.
After enabling FileVault on the first login, reboot the machine.
Install Homebrew as appropriate for the architecture:
- For Apple Silicon:
- Rosetta 2:
sudo softwareupdate --install-rosetta --agree-to-license
- aarch64 (native):
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
- x86_64 (via Rosetta):
arch -x86_64 /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
- Rosetta 2:
- For Intel:
- x86_64 (native):
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
- x86_64 (native):
Run and follow the interactive prompts:
sh <(curl -L https://nixos.org/nix/install)
Enable Flakes:
mkdir -p ~/.config/nix
echo "experimental-features = nix-command flakes" >>~/.config/nix/nix.conf
Don't need to do anything.
Apply:
make host home
Note that Android and macOS have their own dedicated host targets (host-android
and host-darwin
respectively).