nix-config

My NixOS configurations.

Hosts

• desktop — GPU passthrough setup with native GPU boot specialisation
• laptop
• wsl

Structure

├── flake.nix
├── hosts/
│   ├── default.nix       # Nix settings, zsh
│   ├── common/           # Shared desktop+laptop config
│   ├── desktop/
│   ├── laptop/
│   └── wsl/
├── home/
│   ├── common/           # neovim, git, zsh, direnv
│   ├── miko/
│   └── wsl/
└── secrets/              # Encrypted with sops

Usage

sudo nixos-rebuild switch --flake .#<hostname>

Secrets

Managed with sops-nix. GPG (Yubikey) for editing, age (SSH host keys) for decryption.

# Edit secrets
sops secrets/secrets.yaml

# Add new machine
cat /etc/ssh/ssh_host_ed25519_key.pub | ssh-to-age
# Add key to .sops.yaml, then:
sops updatekeys secrets/secrets.yaml