my nix configs

Find a file

Harald Hoyer 65dd2678e3 feat(x1): add 'uv' to the default package list Include 'uv' in the x1 system default packages to extend functionality. This change ensures 'uv' is readily available for use without additional setup.		2025-04-17 09:53:24 +02:00
.secrets	feat(x1): add secrets management and configuration	2025-04-04 14:54:25 +02:00
homes	feat(syncthing): add new devices and folder configurations	2025-04-15 09:20:01 +02:00
lib	nix fmt	2024-11-19 10:31:29 +01:00
modules	feat(services): add systemd email notification module	2025-04-15 08:26:57 +02:00
overlays	chore(goose.nix): update goose-cli to version 1.0.18	2025-04-16 14:56:10 +02:00
packages	fix(nixos-hosts): use arithmetic comparison in argument loop	2025-02-26 15:42:15 +01:00
systems	feat(x1): add 'uv' to the default package list	2025-04-17 09:53:24 +02:00
.gitattributes	remove required from .gitattributes	2024-11-29 15:45:57 +01:00
.gitignore	chore: update .gitignore to include .direnv	2025-03-20 09:56:10 +01:00
.sops.yaml	feat(x1): add secrets management and configuration	2025-04-04 14:54:25 +02:00
CLAUDE.md	docs: add development guidelines in CLAUDE.md	2025-03-20 09:55:32 +01:00
flake.lock	feat(x1): add secrets management and configuration	2025-04-04 14:54:25 +02:00
flake.nix	feat(flakes): add claude desktop package and overlay	2025-03-22 08:26:25 +01:00
README.md	docs: update README with project structure and instructions	2025-03-20 09:43:18 +01:00

README.md

NixOS Configuration

A modular NixOS configuration setup for multiple systems.

Project Structure

modules/: Reusable NixOS/Darwin modules
- common.nix: Common module imports and definitions
- nixos/: NixOS-specific modules
  - home/: Home Manager integration for NixOS
  - nix/: Nix package manager configuration
  - nix-ld/: Dynamic linking support
  - network/: Network configuration modules
    - resolved/: DNS resolution configuration
  - security/: Security-related modules
    - ssh-host-keys/: SSH host key management
  - services/: Service configuration modules
    - base/: Basic system configuration
    - gui/: Graphical interface setup
    - homeprinter/: Home printer support
    - podman/: Container runtime
    - secureboot/: Secure boot configuration
  - sgx/: Intel SGX support
    - aesmd_dcap/: SGX AESMD DCAP service
    - pccs/: SGX Provisioning Certificate Caching Service
  - system/: System configuration modules
    - auto-upgrade/: Automatic system upgrades
    - limits/: System resource limits
    - zram/: ZRAM swap configuration
  - tools/: Common tools configuration
    - direnv/: Direnv integration
    - git/: Git configuration
  - user/: User account configuration
  - virtualization/: Virtualization support
- home/: Home Manager modules
  - cli-apps/: Command-line applications
  - gui/: GUI application configuration
  - tools/: User tools configuration
  - user/: User preferences
- darwin/: Darwin-specific modules
  - home/, nix/, security/, etc.
systems/: Individual system configurations
- x86_64-linux/: Linux systems on x86_64
- aarch64-linux/: Linux systems on ARM
- x86_64-darwin/: macOS systems on x86_64
- aarch64-darwin/: macOS systems on ARM
homes/: Home Manager configurations for each user/system
lib/: Helper functions and utilities
overlays/: Nixpkgs overlays
packages/: Custom packages

Using the Configurations

Install a system via nixos-anywhere

$ nix run github:numtide/nixos-anywhere -- \
  --flake 'git+https://git.hoyer.xyz/harald/nixcfg'.#hostname \
  root@hostname --no-reboot --tty -i $HOME/.ssh/id_ed25519
... enter disk password
$ ssh -t root@hostname systemd-cryptenroll /dev/luksdev --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs=1,15

Update NixOS system

$ nixos-rebuild --use-remote-sudo -L --show-trace --refresh --flake git+https://git.hoyer.xyz/harald/nixcfg boot

Update macOS system

$ darwin-rebuild -L --show-trace --refresh --flake git+https://git.hoyer.xyz/harald/nixcfg switch

Update home-manager configuration

$ nix --refresh run 'git+https://git.hoyer.xyz/harald/nixcfg' -- \
  switch -b backup --flake 'git+https://git.hoyer.xyz/harald/nixcfg'