Find a file

Leyla Becker ba5d5a1487 removed all advertise tags comments		2025-03-22 14:39:19 -05:00
.hooks	switched to using dev shells for local development environment	2024-11-11 18:38:44 -06:00
.vscode	restructured repo to support nix-darwin	2024-11-25 16:58:12 -06:00
configurations	removed all advertise tags comments	2025-03-22 14:39:19 -05:00
const	switched to using dev shells for local development environment	2024-11-11 18:38:44 -06:00
modules	removed unused syncthing config options	2025-03-22 14:35:54 -05:00
nix-config-secrets@d022f6bde6	removed leyla tag from advertise-tags	2025-03-21 17:56:26 -05:00
util	added ssh config for local git pushes	2025-03-14 20:21:18 -05:00
.envrc	switched to using dev shells for local development environment	2024-11-11 18:38:44 -06:00
.gitconfig	updated hooks folder location	2024-09-21 12:24:54 -05:00
.gitignore	moved spellcheck to separate file	2024-11-25 15:14:50 -06:00
.gitmodules	switched submodule files to non flake input	2024-09-24 02:30:54 -05:00
.sops.yaml	added wireguard sops config	2025-02-22 17:00:05 -06:00
build-installer.sh	started draft for installer	2024-11-25 22:37:08 -06:00
flake.lock	removed leyla tag from advertise-tags	2025-03-21 17:56:26 -05:00
flake.nix	added ssh config for local git pushes	2025-03-14 20:21:18 -05:00
install.sh	added note to install script	2024-12-01 18:37:36 -06:00
README.md	moved service config out of host namespace	2025-03-22 13:27:04 -05:00
rebuild.sh	added host option to rebuild script	2025-01-07 15:59:31 -06:00
shell.nix	switched to using dev shells for local development environment	2024-11-11 18:38:44 -06:00

README.md

nix-config

https://git.jan-leila.com/jan-leila/nix-config

nix multi user, multi system, configuration with sops secret management, home-manager, and nixos-anywhere setup via disko with zfs + impermanence

Hosts

Host Map

Hostname	Device Description	Primary User	Role
`twilight`	Desktop Computer	Leyla	Desktop
`horizon`	13 inch Framework Laptop	Leyla	Laptop
`defiant`	NAS Server	Leyla	Server
`hesperium`	Mac	?????	???
`emergent`	Desktop Computer	Eve	Desktop
`threshold`	Laptop	Eve	Laptop
`wolfram`	Steam Deck	House	Handheld
`ceder`	A5 Tablet (not using nix)	Leyla	Tablet
`skate`	A6 Tablet (not using nix)	Leyla	Tablet
`shale`	A6 Tablet (not using nix)	Eve	Tablet
`coven`	Pixel 8 (not using nix)	Leyla	Android

Tooling

Rebuilding

./rebuild.sh

Updating

nix flake update

New host setup

./install.sh --target 192.168.1.130 --flake hostname

Updating Secrets

sops secrets/secrets_file_here.yaml

Inspecting a configuration

nix-inspect -p .

Notes:

Research topics

Look into this for auto rotating sops keys https://technotim.live/posts/rotate-sops-encryption-keys/
Look into this for flake templates https://nix.dev/manual/nix/2.22/command-ref/new-cli/nix3-flake-init
https://nixos-and-flakes.thiscute.world/

Tasks:

Tech Debt

monitor configuration in ~/.config/monitors.xml should be sym linked to /run/gdm/.config/monitors.xml (https://www.reddit.com/r/NixOS/comments/u09cz9/home_manager_create_my_own_symlinks_automatically/)
syncthing folder passwords
nfs export should be backed by the same values for server and client
move fail2ban configs out of fail2ban.nix and into configs for their respective services

New Features

offline access for nfs mounts (overlay with rsync might be a good option here? https://www.spinics.net/lists/linux-unionfs/msg07105.html note about nfs4 and overlay fs)
samba mounts
figure out steam vr things?
Open GL?
rotate sops encryption keys periodically (and somehow sync between devices?)
zfs email after scrubbing # TODO: test this
wake on LAN for updates
ISO target that contains authorized keys for nixos-anywhere 4acc43ebc7/hosts/bootstrap/default.nix
zfs encryption FIDO2 2fa (look into shavee)
Secure Boot - https://github.com/nix-community/lanzaboote
SMART test with email results
Create Tor guard/relay server
remote distributed builds - https://nix.dev/tutorials/nixos/distributed-builds-setup.html
migrate away from flakes and move to npins
fix nfs
fix home assistant
create adguard server