My NixOS configurations

Here's my NixOS/home-manager config files. Requires Nix flakes.

Looking for something simpler to start out with flakes? Try my starter config repo.

Highlights:

• Multiple NixOS configurations, including desktop, laptop, server
• Opt-in persistence through impermanence + blank snapshotting
• Encrypted single BTRFS partition
• Fully declarative self-hosted stuff
• Deployment secrets using sops-nix
• Mesh networked hosts with tailscale and headscale
• Flexible Home Manager Configs through feature flags
• Extensively configured wayland environments (sway and hyprland) and editor (neovim)
• Declarative themes and wallpapers with nix-colors
• Hydra CI/CD server and binary cache that uses the desktops as remote builders

Structure

• flake.nix: Entrypoint for hosts and home configurations. Also exposes a devshell for boostrapping (nix develop or nix-shell).
• lib: A few lib functions for making my flake cleaner
• hosts: NixOS Configurations, accessible via nixos-rebuild --flake.
  • common: Shared configurations consumed by the machine-specific ones.
    • global: Configurations that are globally applied to all my machines.
    • optional: Opt-in configurations my machines can use.
  • atlas: Desktop PC - 32GB RAM, R5 3600x, RX 5700XT | Hyprland
  • pleione: Lenovo Ideapad 3 - 8GB RAM, R7 5700u | Hyprland
  • merope: Raspberry Pi 4 - 8GB RAM | Server
  • celaeno: Oracle Could VPS (Ampere) - 24GB RAM & 4vCPUs | Server
  • alcyone: Vultr VPS - 1GB RAM & 1 vCPU | Server
• home: My Home-manager configuration, acessible via home-manager --flake
  • Each directory here is a "feature" each hm configuration can toggle, thus customizing my setup for each machine (be it a server, desktop, laptop, anything really).
• modules: A few actual modules (with options) I haven't upstreamed yet.
• overlay: Patches and version overrides for some packages. Accessible via nix build.
• pkgs: My custom packages. Also accessible via nix build. You can compose these into your own configuration by using my flake's overlay, or consume them through NUR.
• templates: A couple project templates for different languages. Accessible via nix init.

About the installation

All my computers use a single btrfs (encrypted on all except headless systems) partition, with subvolumes for /nix, a /persist directory (which I opt in using impermanence), swap file, and a root subvolume (cleared on every boot).

Home-manager is used in a standalone way, and because of opt-in persistence is activated on every boot with loginShellInit.

How to bootstrap

All you need is nix (any version). Run:

nix-shell

If you already have nix 2.4+, git, and have already enabled flakes and nix-command, you can also use the non-legacy command:

nix develop

nixos-rebuild --flake . To build system configurations

home-manager --flake . To build user configurations

nix build (or shell or run) To build and use packages

sops To manage secrets

Secrets

For deployment secrets (such as user passwords and server service secrets), I'm using the awesome sops-nix. All secrets are encrypted with my personal PGP key (stored on a YubiKey), as well as the relevant systems's SSH host keys.

On my desktop and laptop, I use pass for managing passwords, which are encrypted using (you bet) my PGP key. This same key is also used for mail signing, as well as for SSH'ing around.

Tooling and applications I use

Most relevant user apps daily drivers:

• hyprland + swayidle + swaylock
• waybar
• neovim
• fish
• alacritty
• qutebrowser
• neomutt + mbsync
• khal + khard + todoman + vdirsyncer
• gpg + pass
• tailscale
• podman
• zathura
• wofi
• bat + fd + rg
• kdeconnect
• sublime-music

Some of the services I host:

• hydra
• navidrome
• deluge
• prometheus
• websites (such as https://m7.rs)
• minecraft
• headscale

Nixy stuff:

• nix-colors
• sops-nix
• impermanence
• home-manager
• deploy-rs
• and NixOS and nix itself, of course :)

Let me know if you have any questions about them :)

Unixpornish stuff

That's how my hyprland desktop setup look like (as of 2022 July).