andreijiroh.dev / nixops-config
NixOS + home-manager configs, mirrored from GitLab SaaS. gitlab.com/andreijiroh-dev/nixops-config
nix-flake nixos home-manager nixpkgs nix-flakes
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

chore(agenix); dedupe imports and prep for system rebuilds later

Andrei Jiroh Halili 391a6f33 ccc41425

+254 -210
+240 -205
flake.nix
··· 176 176 flake-utils.lib.eachDefaultSystem ( 177 177 system: 178 178 let 179 - pkgs = import nixpkgs { inherit system; }; 179 + pkgs = import nixpkgs { 180 + inherit system; 181 + overlays = [ 182 + agenix-rekey.overlays.default 183 + llm-agents.overlays.default 184 + ]; 185 + }; 180 186 in 181 187 { 182 188 # Packages for this system ··· 188 194 # Optionally make one the default to support `nix profile add .#` 189 195 default = pkgs.callPackage ./pkgs/coolify-compose.nix { }; 190 196 191 - live-cd = (nixpkgs.lib.nixosSystem { 192 - inherit system; 193 - modules = [ 194 - nix-ld.nixosModules.nix-ld 195 - determinate.nixosModules.default 196 - home-manager.nixosModules.home-manager 197 - vscode-server.nixosModules.default 198 - chaotic.nixosModules.default 199 - ./hosts/live-cd/kde-plasma.nix 200 - ]; 201 - specialArgs = { 202 - inherit 203 - self 204 - nixpkgs 205 - home-manager 206 - nixos-hardware 207 - determinate 208 - vscode-server 209 - nix-ld 210 - flake-utils 211 - systems 212 - nixos-generators 213 - zen-browser 214 - nix4vscode 215 - firefox-addons 216 - agenix 217 - agenix-rekey 218 - chaotic 219 - llm-agents 220 - dev-pkgs 221 - ; 222 - }; 223 - }).config.system.build.isoImage; 197 + live-cd = 198 + (nixpkgs.lib.nixosSystem { 199 + inherit system; 200 + modules = [ 201 + nix-ld.nixosModules.nix-ld 202 + determinate.nixosModules.default 203 + home-manager.nixosModules.home-manager 204 + vscode-server.nixosModules.default 205 + chaotic.nixosModules.default 206 + ./hosts/live-cd/kde-plasma.nix 207 + ]; 208 + specialArgs = { 209 + inherit 210 + self 211 + nixpkgs 212 + home-manager 213 + nixos-hardware 214 + determinate 215 + vscode-server 216 + nix-ld 217 + flake-utils 218 + systems 219 + nixos-generators 220 + zen-browser 221 + nix4vscode 222 + firefox-addons 223 + agenix 224 + agenix-rekey 225 + chaotic 226 + llm-agents 227 + dev-pkgs 228 + ; 229 + }; 230 + }).config.system.build.isoImage; 231 + }; 232 + 233 + devShells.default = pkgs.mkShell { 234 + packages = with pkgs; [ 235 + agenix-rekey 236 + gitFull 237 + nano 238 + nixfmt-tree 239 + nixfmt 240 + nil 241 + nixd 242 + ]; 224 243 }; 225 244 226 245 # If you want app-style outputs, you can also define apps here: ··· 269 288 270 289 specialArgs = { 271 290 inherit 272 - self 273 - nixpkgs 274 - home-manager 275 - nixos-hardware 276 - determinate 277 - vscode-server 278 - nix-ld 279 - flake-utils 280 - systems 281 - nixos-generators 282 - zen-browser 283 - nix4vscode 284 - firefox-addons 285 - agenix 286 - agenix-rekey 287 - chaotic 288 - llm-agents 289 - dev-pkgs 290 - ; 291 + self 292 + nixpkgs 293 + home-manager 294 + nixos-hardware 295 + determinate 296 + vscode-server 297 + nix-ld 298 + flake-utils 299 + systems 300 + nixos-generators 301 + zen-browser 302 + nix4vscode 303 + firefox-addons 304 + agenix 305 + agenix-rekey 306 + chaotic 307 + llm-agents 308 + dev-pkgs 309 + ; 291 310 }; 292 311 }; 293 312 ··· 299 318 determinate.nixosModules.default 300 319 home-manager.nixosModules.home-manager 301 320 vscode-server.nixosModules.default 321 + agenix.nixosModules.default 322 + agenix-rekey.nixosModules.default 302 323 303 324 # and then the configs 304 325 ./shared/meta.nix ··· 307 328 308 329 specialArgs = { 309 330 inherit 310 - self 311 - nixpkgs 312 - home-manager 313 - nixos-hardware 314 - determinate 315 - vscode-server 316 - nix-ld 317 - flake-utils 318 - systems 319 - nixos-generators 320 - zen-browser 321 - nix4vscode 322 - firefox-addons 323 - agenix 324 - agenix-rekey 325 - chaotic 326 - llm-agents 327 - dev-pkgs 328 - ; 331 + self 332 + nixpkgs 333 + home-manager 334 + nixos-hardware 335 + determinate 336 + vscode-server 337 + nix-ld 338 + flake-utils 339 + systems 340 + nixos-generators 341 + zen-browser 342 + nix4vscode 343 + firefox-addons 344 + agenix 345 + agenix-rekey 346 + chaotic 347 + llm-agents 348 + dev-pkgs 349 + ; 329 350 }; 330 351 }; 331 352 ··· 348 369 349 370 specialArgs = { 350 371 inherit 351 - self 352 - nixpkgs 353 - home-manager 354 - nixos-hardware 355 - determinate 356 - vscode-server 357 - nix-ld 358 - flake-utils 359 - systems 360 - nixos-generators 361 - zen-browser 362 - nix4vscode 363 - firefox-addons 364 - agenix 365 - agenix-rekey 366 - chaotic 367 - llm-agents 368 - dev-pkgs 369 - ; 372 + self 373 + nixpkgs 374 + home-manager 375 + nixos-hardware 376 + determinate 377 + vscode-server 378 + nix-ld 379 + flake-utils 380 + systems 381 + nixos-generators 382 + zen-browser 383 + nix4vscode 384 + firefox-addons 385 + agenix 386 + agenix-rekey 387 + chaotic 388 + llm-agents 389 + dev-pkgs 390 + ; 370 391 }; 371 392 }; 372 393 ··· 387 408 ]; 388 409 specialArgs = { 389 410 inherit 390 - self 391 - nixpkgs 392 - home-manager 393 - nixos-hardware 394 - determinate 395 - vscode-server 396 - nix-ld 397 - flake-utils 398 - systems 399 - nixos-generators 400 - zen-browser 401 - nix4vscode 402 - firefox-addons 403 - agenix 404 - agenix-rekey 405 - chaotic 406 - llm-agents 407 - dev-pkgs 408 - ; 411 + self 412 + nixpkgs 413 + home-manager 414 + nixos-hardware 415 + determinate 416 + vscode-server 417 + nix-ld 418 + flake-utils 419 + systems 420 + nixos-generators 421 + zen-browser 422 + nix4vscode 423 + firefox-addons 424 + agenix 425 + agenix-rekey 426 + chaotic 427 + llm-agents 428 + dev-pkgs 429 + ; 409 430 }; 410 431 }; 411 432 ··· 421 442 ]; 422 443 specialArgs = { 423 444 inherit 424 - self 425 - nixpkgs 426 - home-manager 427 - nixos-hardware 428 - determinate 429 - vscode-server 430 - nix-ld 431 - flake-utils 432 - systems 433 - nixos-generators 434 - zen-browser 435 - nix4vscode 436 - firefox-addons 437 - agenix 438 - agenix-rekey 439 - chaotic 440 - llm-agents 441 - dev-pkgs 442 - ; 445 + self 446 + nixpkgs 447 + home-manager 448 + nixos-hardware 449 + determinate 450 + vscode-server 451 + nix-ld 452 + flake-utils 453 + systems 454 + nixos-generators 455 + zen-browser 456 + nix4vscode 457 + firefox-addons 458 + agenix 459 + agenix-rekey 460 + chaotic 461 + llm-agents 462 + dev-pkgs 463 + ; 443 464 }; 444 465 }; 445 466 ··· 455 476 ]; 456 477 specialArgs = { 457 478 inherit 458 - self 459 - nixpkgs 460 - home-manager 461 - nixos-hardware 462 - determinate 463 - vscode-server 464 - nix-ld 465 - flake-utils 466 - systems 467 - nixos-generators 468 - zen-browser 469 - nix4vscode 470 - firefox-addons 471 - agenix 472 - agenix-rekey 473 - chaotic 474 - llm-agents 475 - dev-pkgs 476 - ; 479 + self 480 + nixpkgs 481 + home-manager 482 + nixos-hardware 483 + determinate 484 + vscode-server 485 + nix-ld 486 + flake-utils 487 + systems 488 + nixos-generators 489 + zen-browser 490 + nix4vscode 491 + firefox-addons 492 + agenix 493 + agenix-rekey 494 + chaotic 495 + llm-agents 496 + dev-pkgs 497 + ; 477 498 }; 478 499 }; 479 500 }; ··· 488 509 pkgs = nixpkgs.legacyPackages.x86_64-linux; 489 510 extraSpecialArgs = { 490 511 inherit 491 - self 492 - nixpkgs 493 - home-manager 494 - nixos-hardware 495 - determinate 496 - vscode-server 497 - nix-ld 498 - flake-utils 499 - systems 500 - nixos-generators 501 - zen-browser 502 - nix4vscode 503 - firefox-addons 504 - agenix 505 - agenix-rekey 506 - chaotic 507 - llm-agents 508 - dev-pkgs 509 - ; 512 + self 513 + nixpkgs 514 + home-manager 515 + nixos-hardware 516 + determinate 517 + vscode-server 518 + nix-ld 519 + flake-utils 520 + systems 521 + nixos-generators 522 + zen-browser 523 + nix4vscode 524 + firefox-addons 525 + agenix 526 + agenix-rekey 527 + chaotic 528 + llm-agents 529 + dev-pkgs 530 + ; 510 531 }; 511 532 modules = [ 512 533 { ··· 543 564 pkgs = nixpkgs.legacyPackages.x86_64-linux; 544 565 extraSpecialArgs = { 545 566 inherit 546 - self 547 - nixpkgs 548 - home-manager 549 - nixos-hardware 550 - determinate 551 - vscode-server 552 - nix-ld 553 - flake-utils 554 - systems 555 - nixos-generators 556 - zen-browser 557 - nix4vscode 558 - firefox-addons 559 - agenix 560 - agenix-rekey 561 - chaotic 562 - llm-agents 563 - dev-pkgs 564 - ; 567 + self 568 + nixpkgs 569 + home-manager 570 + nixos-hardware 571 + determinate 572 + vscode-server 573 + nix-ld 574 + flake-utils 575 + systems 576 + nixos-generators 577 + zen-browser 578 + nix4vscode 579 + firefox-addons 580 + agenix 581 + agenix-rekey 582 + chaotic 583 + llm-agents 584 + dev-pkgs 585 + ; 565 586 }; 566 587 modules = [ 567 588 { ··· 597 618 pkgs = nixpkgs.legacyPackages.aarch64-linux; 598 619 extraSpecialArgs = { 599 620 inherit 600 - self 601 - nixpkgs 602 - home-manager 603 - nixos-hardware 604 - determinate 605 - vscode-server 606 - nix-ld 607 - flake-utils 608 - systems 609 - nixos-generators 610 - zen-browser 611 - nix4vscode 612 - firefox-addons 613 - agenix 614 - agenix-rekey 615 - chaotic 616 - llm-agents 617 - dev-pkgs 618 - ; 621 + self 622 + nixpkgs 623 + home-manager 624 + nixos-hardware 625 + determinate 626 + vscode-server 627 + nix-ld 628 + flake-utils 629 + systems 630 + nixos-generators 631 + zen-browser 632 + nix4vscode 633 + firefox-addons 634 + agenix 635 + agenix-rekey 636 + chaotic 637 + llm-agents 638 + dev-pkgs 639 + ; 619 640 }; 620 641 modules = [ 621 642 { ··· 641 662 } 642 663 ]; 643 664 }; 665 + }; 666 + 667 + # Expose the necessary information in your flake so agenix-rekey 668 + # knows where it has to look for secrets and paths. 669 + # 670 + # Make sure that the pkgs passed here comes from the same nixpkgs version as 671 + # the pkgs used on your hosts in `nixosConfigurations`/`darwinConfigurations`, otherwise the rekeyed 672 + # derivations will not be found! 673 + agenix-rekey = agenix-rekey.configure { 674 + userFlake = self; 675 + nixosConfigurations = self.nixosConfigurations; 676 + darwinConfigurations = self.darwinConfigurations or { }; 677 + # Example for colmena: 678 + # nixosConfigurations = ((colmena.lib.makeHive self.colmena).introspect (x: x)).nodes; 644 679 }; 645 680 646 681 # This is for external users who want to reproduce my configs as needed
+1
hosts/stellapent-cier/broadcom.nix
··· 28 28 "broadcom-sta-6.30.223.271-59-6.18.6" 29 29 "broadcom-sta-6.30.223.271-59-6.18.8" 30 30 "broadcom-sta-6.30.223.271-59-6.19.5" 31 + "broadcom-sta-6.30.223.271-59-6.19.8" 31 32 ]; 32 33 }
+13 -5
shared/agenix.nix
··· 1 1 # This is my agenix setup for all things SecretOps on my NixOS and home-manager 2 2 # configurations. 3 - { lib, pkgs, config, self, agenix-rekey, agenix, ... }: 3 + { 4 + lib, 5 + pkgs, 6 + config, 7 + self, 8 + agenix-rekey, 9 + agenix, 10 + ... 11 + }: 4 12 5 13 let 6 14 cfg = config.nixops-config.secretOps.agenix; ··· 12 20 hackclub_yk = pubkeys.fido2Keys.hackclub_yubikey; 13 21 in 14 22 { 15 - imports = [ 16 - agenix.nixosModules.default 17 - agenix-rekey.nixosModules.default 18 - ]; 23 + #imports = [ 24 + # agenix.nixosModules.default 25 + # agenix-rekey.nixosModules.default 26 + #]; 19 27 20 28 config = { 21 29 age.rekey = {