nix-config/README.md

3.1 KiB

nix-config

https://git.jan-leila.com/jan-leila/nix-config

nix multi user, multi system, configuration with sops secret management, home-manager, and nixos-anywhere setup via disko with zfs + impermanence

Hosts

Host Map

Hostname Device Description Primary User Role
twilight Desktop Computer Leyla Desktop
horizon 13 inch Framework Laptop Leyla Laptop
defiant NAS Server Leyla Server
hesperium Mac ????? ???
emergent Desktop Computer Eve Desktop
threshold Laptop Eve Laptop
wolfram Steam Deck House Handheld
ceder A5 Tablet (not using nix) Leyla Tablet
skate A6 Tablet (not using nix) Leyla Tablet
shale A6 Tablet (not using nix) Eve Tablet
coven Pixel 8 (not using nix) Leyla Android

Tooling

Rebuilding

./rebuild.sh

Updating

nix flake update

New host setup

./install.sh --target 192.168.1.130 --flake hostname

Updating Secrets

sops secrets/secrets_file_here.yaml

Inspecting a configuration

nix-inspect -p .

Notes:

Research topics

Tasks:

Tech Debt

  • monitor configuration in ~/.config/monitors.xml should be sym linked to /run/gdm/.config/monitors.xml (https://www.reddit.com/r/NixOS/comments/u09cz9/home_manager_create_my_own_symlinks_automatically/)
  • syncthing folder passwords
  • nfs export should be backed by the same values for server and client
  • move fail2ban configs out of fail2ban.nix and into configs for their respective services
  • nginx config should be reworked to give a list of subdomains and then the config information to apply to each proxy

New Features