+15 -19

README.md

reviewed

··· 1 1 # `@andreijiroh-dev/nixops-config` 2 2 3 3 - This is @ajhalili2006's NixOS + Home Manager configuration for his laptop and homelabs, in sync with the 4 4 - [nixpkgs-specific dotfiles repository]. Also planned to be used in Hack Club Nest soon. 3 3 + This is @ajhalili2006's NixOS + Home Manager configuration for his laptop and homelabs, 4 4 + alongside in tildes with Nix installed and in sync with the [nixpkgs-specific branch][nix-dots] 5 5 + of my dotfiles repository. 5 6 6 6 - [nixpkgs-specific dotfiles repository]: https://gitlab.com/andreijiroh-dev/dotfiles/tree/nixpkgs 7 7 + [nix-dots]: https://gitlab.com/andreijiroh-dev/dotfiles/tree/nixpkgs 7 8 8 9 ## CI Status 9 10 ··· 102 103 ```nix 103 104 { 104 105 description = "My NixOS configuration"; 105 105 - inputs.nixpkgs.url = "github:NixOS/nixpkgs/24.11"; 106 106 + inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable"; # use nixos-unstable instead if preferred 106 107 inputs.andreijiroh-dev.url = "github:andreijiroh-dev/nixops-config"; 107 108 # needed if you use stable instead of unstable 108 109 inputs.andreijiroh-dev.inputs.nixpkgs.follows = "nixpkgs"; 109 110 110 110 - # TODO: fix this soon 111 111 outputs = { self, andreijiroh-dev, nixpkgs }: { 112 112 - let 113 113 - # change {hostname} to something like stellapent-cier 114 114 - # if you like to reuse my configs 115 115 - reusableConfig = andreijiroh-dev.nixosConfigurations.{hostname}; 116 116 - in 117 112 { 118 118 - nixosConfigurations.{hostname} = reusableConfig { 113 113 + nixosConfigurations.{hostname} = nixpkgs.lib.nixosSystem { 119 114 # your customizations here 120 115 }; 121 116 ··· 145 140 146 141 ## Availabled shared configs 147 142 148 148 - - [`flatpak.nix`](./shared/flatpak.nix): NixOS for enabling Flatpaks 149 149 - - [`gnupg.nix`](./shared/gnupg.nix): GnuPG configuration 150 150 - - [`locale.nix`](./shared/locale.nix): Locale configuration 151 151 - - [`meta-configs.nix`](./shared/meta-configs.nix): Meta configurations for the system, mostly related to Nix and nixpkgs. 152 152 - - [`networking.nix`](./shared/networking.nix): Networking configuration, currently DNS resolver settings for `systemd-resolved` 153 153 - - [`ssh-keys.nix`](./shared/ssh-keys.nix): SSH keys configuration as NixOS module, intended to be in sync with my keys on git forges 154 154 - - [`server/devenv.nix`](./shared/server/devenv.nix): Development environment configuration, plus Docker and VM configurations. 155 155 - - [`server/ssh.nix`](./shared/server/ssh.nix): SSH server configuration 143 143 + - `base` - Individual base components' configuration (systemd, networking, etc.) 144 144 + - [`sshKeys`](./shared/ssh-keys.nix) - My SSH public keys, declaratively managed. 145 145 + = [`hostsFile`](./shared/hosts-file.nix) - Static list of host entries, used for merging with host-specific hosts file. 146 146 + - [`systemd`](./shared/systemd.nix) - Systemd configurations and service units. 147 147 + - [`networking`](./shared/networking.nix) - Networking configurations, mostly for configuring DNS resolvers via `systemd-resolved`. 148 148 + - [`locale`](./shared/locale.nix) - Time and locale settings (e.g. timezone, i18n configs). 149 149 + - [`gnupg`](./shared/gnupg.nix) - GPG Agent settings and packages related to GPG and friends 150 150 + = [`metaConfigs`](./shared/meta-configs.nix) - Nixpkgs and Nix settings, also contains the `system.stateVersion` setting. 151 151 + - [`meta`](./shared/meta.nix) - same as `base`, but oneliner import. 156 152 157 153 ## License 158 154

+17 -17

flake.lock

reviewed

··· 160 160 ] 161 161 }, 162 162 "locked": { 163 163 - "lastModified": 1747565775, 164 164 - "narHash": "sha256-B6jmKHUEX1jxxcdoYHl7RVaeohtAVup8o3nuVkzkloA=", 163 163 + "lastModified": 1747793476, 164 164 + "narHash": "sha256-2qAOSixSrbb9l6MI+SI4zGineOzDcc2dgOOFK9Dx+IY=", 165 165 "owner": "nix-community", 166 166 "repo": "home-manager", 167 167 - "rev": "97118a310eb8e13bc1b9b12d67267e55b7bee6c8", 167 167 + "rev": "2468b2d35512d093aeb04972a1d8c20a0735793f", 168 168 "type": "github" 169 169 }, 170 170 "original": { ··· 217 217 ] 218 218 }, 219 219 "locked": { 220 220 - "lastModified": 1747037786, 221 221 - "narHash": "sha256-nhOupZpHdrUYK2a2y1y238VEPVpUmJw/nEd212wyG0c=", 220 220 + "lastModified": 1747646130, 221 221 + "narHash": "sha256-B4+JyeF6u7FINPD1Fzc7QiDlmG1L06z/34MqMlBfPDQ=", 222 222 "owner": "Mic92", 223 223 "repo": "nix-ld", 224 224 - "rev": "90316ea7ffa3336547b85b3b2827d9d4552a4a79", 224 224 + "rev": "14ad0c0a26dae752c93fa9fa59437bfd2b8aaf69", 225 225 "type": "github" 226 226 }, 227 227 "original": { ··· 253 253 ] 254 254 }, 255 255 "locked": { 256 256 - "lastModified": 1742568034, 257 257 - "narHash": "sha256-QaMEhcnscfF2MqB7flZr+sLJMMYZPnvqO4NYf9B4G38=", 256 256 + "lastModified": 1747663185, 257 257 + "narHash": "sha256-Obh50J+O9jhUM/FgXtI3he/QRNiV9+J53+l+RlKSaAk=", 258 258 "owner": "nix-community", 259 259 "repo": "nixos-generators", 260 260 - "rev": "42ee229088490e3777ed7d1162cb9e9d8c3dbb11", 260 260 + "rev": "ee07ba0d36c38e9915c55d2ac5a8fb0f05f2afcc", 261 261 "type": "github" 262 262 }, 263 263 "original": { ··· 268 268 }, 269 269 "nixos-hardware": { 270 270 "locked": { 271 271 - "lastModified": 1747129300, 272 272 - "narHash": "sha256-L3clA5YGeYCF47ghsI7Tcex+DnaaN/BbQ4dR2wzoiKg=", 271 271 + "lastModified": 1747723695, 272 272 + "narHash": "sha256-lSXzv33yv1O9r9Ai1MtYFDX3OKhWsZMn/5FFb4Rni/k=", 273 273 "owner": "NixOS", 274 274 "repo": "nixos-hardware", 275 275 - "rev": "e81fd167b33121269149c57806599045fd33eeed", 275 275 + "rev": "6ac6ec6fcb410e15a60ef5ec94b8a2b35b5dd282", 276 276 "type": "github" 277 277 }, 278 278 "original": { ··· 332 332 }, 333 333 "nixpkgs_2": { 334 334 "locked": { 335 335 - "lastModified": 1747060738, 336 336 - "narHash": "sha256-ByfPRQuqj+nhtVV0koinEpmJw0KLzNbgcgi9EF+NVow=", 337 337 - "rev": "eaeed9530c76ce5f1d2d8232e08bec5e26f18ec1", 338 338 - "revCount": 798761, 335 335 + "lastModified": 1747533086, 336 336 + "narHash": "sha256-+8goyptSXa7qV0k5uPKyky58jpBjI/qkzsbwCZFvhRY=", 337 337 + "rev": "8406224e30c258025cb8b31704bdb977a8f1f009", 338 338 + "revCount": 802343, 339 339 "type": "tarball", 340 340 - "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.798761%2Brev-eaeed9530c76ce5f1d2d8232e08bec5e26f18ec1/0196c828-3cbe-7b25-835b-d670b4ad9335/source.tar.gz" 340 340 + "url": "https://api.flakehub.com/f/pinned/DeterminateSystems/nixpkgs-weekly/0.1.802343%2Brev-8406224e30c258025cb8b31704bdb977a8f1f009/0196ec33-1ffa-76fa-ad14-ac737caf6446/source.tar.gz" 341 341 }, 342 342 "original": { 343 343 "type": "tarball",

+18 -2

flake.nix

reviewed

··· 168 168 }; 169 169 170 170 # This is for external users who want to reproduce my configs as needed 171 171 - nixosModules = { 172 172 - base = ./shared/meta.nix; 171 171 + exportedConfigs = { 172 172 + meta = ./shared/meta.nix; 173 173 + base = { 174 174 + sshKeys = ./shared/ssh-keys.nix; 175 175 + hostsFile = ./shared/hosts-file.nix; 176 176 + systemd = ./shared/systemd.nix; 177 177 + networking = ./shared/networking.nix; 178 178 + locale = ./shared/locale.nix; 179 179 + gnupg = ./shared/gnupg.nix; 180 180 + metaConfigs = ./shared/meta-configs.nix; 181 181 + }; 173 182 desktop = { 174 183 kdePlasma = ./shared/desktop/kde-plasma.nix; 175 184 base = ./shared/desktop/base.nix; 185 185 + flatpak = ./shared/desktop/flatpak.nix; 186 186 + _1password = ./shared/desktop/1password.nix; 176 187 }; 177 188 server = { 189 189 + devenv = ./shared/server/devenv.nix; 190 190 + ssh = ./shared/server/ssh.nix; 191 191 + firewall = ./shared/server/firewall.nix; 192 192 + tailscale = ./shared/server/tailscale.nix; 193 193 + cockpit = ./shared/server/cockpit.nix; 178 194 }; 179 195 }; 180 196 };