my nix configs

Find a file

Harald Hoyer 5521b0f825 feat(kernel): increase inotify limits for user instances/watches Set higher limits for `fs.inotify.max_user_instances` and `fs.inotify.max_user_watches` in the kernel sysctl configuration. This improves system monitoring capabilities, particularly for applications relying on inotify.		2025-04-17 10:31:30 +02:00
.secrets	feat(x1): add secrets management and configuration	2025-04-04 14:54:25 +02:00
homes	feat(syncthing): add new devices and folder configurations	2025-04-15 09:20:01 +02:00
lib	nix fmt	2024-11-19 10:31:29 +01:00
modules	feat(services): add systemd email notification module	2025-04-15 08:26:57 +02:00
overlays	chore(goose.nix): update goose-cli to version 1.0.18	2025-04-16 14:56:10 +02:00
packages	fix(nixos-hosts): use arithmetic comparison in argument loop	2025-02-26 15:42:15 +01:00
systems	feat(kernel): increase inotify limits for user instances/watches	2025-04-17 10:31:30 +02:00
.gitattributes	remove required from .gitattributes	2024-11-29 15:45:57 +01:00
.gitignore	chore: update .gitignore to include .direnv	2025-03-20 09:56:10 +01:00
.sops.yaml	feat(x1): add secrets management and configuration	2025-04-04 14:54:25 +02:00
CLAUDE.md	docs: add development guidelines in CLAUDE.md	2025-03-20 09:55:32 +01:00
flake.lock	feat(x1): add secrets management and configuration	2025-04-04 14:54:25 +02:00
flake.nix	feat(flakes): add claude desktop package and overlay	2025-03-22 08:26:25 +01:00
README.md	docs: update README with project structure and instructions	2025-03-20 09:43:18 +01:00

README.md

NixOS Configuration

A modular NixOS configuration setup for multiple systems.

Project Structure

modules/: Reusable NixOS/Darwin modules
- common.nix: Common module imports and definitions
- nixos/: NixOS-specific modules
  - home/: Home Manager integration for NixOS
  - nix/: Nix package manager configuration
  - nix-ld/: Dynamic linking support
  - network/: Network configuration modules
    - resolved/: DNS resolution configuration
  - security/: Security-related modules
    - ssh-host-keys/: SSH host key management
  - services/: Service configuration modules
    - base/: Basic system configuration
    - gui/: Graphical interface setup
    - homeprinter/: Home printer support
    - podman/: Container runtime
    - secureboot/: Secure boot configuration
  - sgx/: Intel SGX support
    - aesmd_dcap/: SGX AESMD DCAP service
    - pccs/: SGX Provisioning Certificate Caching Service
  - system/: System configuration modules
    - auto-upgrade/: Automatic system upgrades
    - limits/: System resource limits
    - zram/: ZRAM swap configuration
  - tools/: Common tools configuration
    - direnv/: Direnv integration
    - git/: Git configuration
  - user/: User account configuration
  - virtualization/: Virtualization support
- home/: Home Manager modules
  - cli-apps/: Command-line applications
  - gui/: GUI application configuration
  - tools/: User tools configuration
  - user/: User preferences
- darwin/: Darwin-specific modules
  - home/, nix/, security/, etc.
systems/: Individual system configurations
- x86_64-linux/: Linux systems on x86_64
- aarch64-linux/: Linux systems on ARM
- x86_64-darwin/: macOS systems on x86_64
- aarch64-darwin/: macOS systems on ARM
homes/: Home Manager configurations for each user/system
lib/: Helper functions and utilities
overlays/: Nixpkgs overlays
packages/: Custom packages

Using the Configurations

Install a system via nixos-anywhere

$ nix run github:numtide/nixos-anywhere -- \
  --flake 'git+https://git.hoyer.xyz/harald/nixcfg'.#hostname \
  root@hostname --no-reboot --tty -i $HOME/.ssh/id_ed25519
... enter disk password
$ ssh -t root@hostname systemd-cryptenroll /dev/luksdev --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs=1,15

Update NixOS system

$ nixos-rebuild --use-remote-sudo -L --show-trace --refresh --flake git+https://git.hoyer.xyz/harald/nixcfg boot

Update macOS system

$ darwin-rebuild -L --show-trace --refresh --flake git+https://git.hoyer.xyz/harald/nixcfg switch

Update home-manager configuration

$ nix --refresh run 'git+https://git.hoyer.xyz/harald/nixcfg' -- \
  switch -b backup --flake 'git+https://git.hoyer.xyz/harald/nixcfg'