🏡 my personal home lab
switch to unstable
+33
-44
+19
-19
flake.lock
+19
-19
flake.lock
···
40
40
},
41
41
"nixos-hardware": {
42
42
"locked": {
43
-
"lastModified": 1772972630,
44
-
"narHash": "sha256-mUJxsNOrBMNOUJzN0pfdVJ1r2pxeqm9gI/yIKXzVVbk=",
43
+
"lastModified": 1774018263,
44
+
"narHash": "sha256-HHYEwK1A22aSaxv2ibhMMkKvrDGKGlA/qObG4smrSqc=",
45
45
"owner": "nixos",
46
46
"repo": "nixos-hardware",
47
-
"rev": "3966ce987e1a9a164205ac8259a5fe8a64528f72",
47
+
"rev": "2d4b4717b2534fad5c715968c1cece04a172b365",
48
48
"type": "github"
49
49
},
50
50
"original": {
···
56
56
},
57
57
"nixpkgs": {
58
58
"locked": {
59
-
"lastModified": 1773068389,
60
-
"narHash": "sha256-vMrm7Pk2hjBRPnCSjhq1pH0bg350Z+pXhqZ9ICiqqCs=",
59
+
"lastModified": 1774106199,
60
+
"narHash": "sha256-US5Tda2sKmjrg2lNHQL3jRQ6p96cgfWh3J1QBliQ8Ws=",
61
61
"owner": "nixos",
62
62
"repo": "nixpkgs",
63
-
"rev": "44bae273f9f82d480273bab26f5c50de3724f52f",
63
+
"rev": "6c9a78c09ff4d6c21d0319114873508a6ec01655",
64
64
"type": "github"
65
65
},
66
66
"original": {
67
67
"owner": "nixos",
68
-
"ref": "nixos-25.11",
68
+
"ref": "nixos-unstable",
69
69
"repo": "nixpkgs",
70
70
"type": "github"
71
71
}
72
72
},
73
-
"nixpkgs-unstable": {
73
+
"nixpkgs-stable": {
74
74
"locked": {
75
-
"lastModified": 1772963539,
76
-
"narHash": "sha256-9jVDGZnvCckTGdYT53d/EfznygLskyLQXYwJLKMPsZs=",
75
+
"lastModified": 1774244481,
76
+
"narHash": "sha256-4XfMXU0DjN83o6HWZoKG9PegCvKvIhNUnRUI19vzTcQ=",
77
77
"owner": "nixos",
78
78
"repo": "nixpkgs",
79
-
"rev": "9dcb002ca1690658be4a04645215baea8b95f31d",
79
+
"rev": "4590696c8693fea477850fe379a01544293ca4e2",
80
80
"type": "github"
81
81
},
82
82
"original": {
83
83
"owner": "nixos",
84
-
"ref": "nixos-unstable",
84
+
"ref": "nixos-25.11",
85
85
"repo": "nixpkgs",
86
86
"type": "github"
87
87
}
···
91
91
"deploy-rs": "deploy-rs",
92
92
"nixos-hardware": "nixos-hardware",
93
93
"nixpkgs": "nixpkgs",
94
-
"nixpkgs-unstable": "nixpkgs-unstable",
94
+
"nixpkgs-stable": "nixpkgs-stable",
95
95
"sops-nix": "sops-nix",
96
96
"turing-rk1": "turing-rk1"
97
97
}
···
103
103
]
104
104
},
105
105
"locked": {
106
-
"lastModified": 1773096132,
107
-
"narHash": "sha256-M3zEnq9OElB7zqc+mjgPlByPm1O5t2fbUrH3t/Hm5Ag=",
106
+
"lastModified": 1774303811,
107
+
"narHash": "sha256-fhG4JAcLgjKwt+XHbjs8brpWnyKUfU4LikLm3s0Q/ic=",
108
108
"owner": "Mic92",
109
109
"repo": "sops-nix",
110
-
"rev": "d1ff3b1034d5bab5d7d8086a7803c5a5968cd784",
110
+
"rev": "614e256310e0a4f8a9ccae3fa80c11844fba7042",
111
111
"type": "github"
112
112
},
113
113
"original": {
···
138
138
]
139
139
},
140
140
"locked": {
141
-
"lastModified": 1771765454,
142
-
"narHash": "sha256-Pf+yEetgTUsVf1HRT9PKXHbx5nAiT46ISYxJuoGt6M4=",
141
+
"lastModified": 1773530085,
142
+
"narHash": "sha256-Y8f/qeJuaa4+5g1H5o9q+ZvaLh3SFL2PvVw/yTZaFbE=",
143
143
"owner": "GiyoMoon",
144
144
"repo": "nixos-turing-rk1",
145
-
"rev": "be71229f4587ecf84b5987d0be76f7bc2531a503",
145
+
"rev": "b7b318b68ddb34cd920b9a9bf0419b9ebd462ccc",
146
146
"type": "github"
147
147
},
148
148
"original": {
+5
-5
flake.nix
+5
-5
flake.nix
···
2
2
description = "my homelab";
3
3
4
4
inputs = {
5
-
nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
6
-
nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
5
+
nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
6
+
nixpkgs-stable.url = "github:nixos/nixpkgs/nixos-25.11";
7
7
nixos-hardware.url = "github:nixos/nixos-hardware/master";
8
8
deploy-rs = {
9
9
url = "github:serokell/deploy-rs";
···
23
23
{
24
24
self,
25
25
nixpkgs,
26
-
nixpkgs-unstable,
26
+
nixpkgs-stable,
27
27
deploy-rs,
28
28
nixos-hardware,
29
29
turing-rk1,
···
60
60
name: host:
61
61
let
62
62
system = "aarch64-linux";
63
-
pkgs-unstable = import nixpkgs-unstable {
63
+
pkgs-stable = import nixpkgs-stable {
64
64
inherit system;
65
65
config.allowUnfree = true;
66
66
};
···
72
72
host
73
73
hosts
74
74
name
75
-
pkgs-unstable
76
75
inputs
76
+
pkgs-stable
77
77
;
78
78
};
79
79
modules = [
-5
modules/beszel/agent.nix
-5
modules/beszel/agent.nix
···
1
1
{
2
2
config,
3
3
name,
4
-
pkgs-unstable,
5
4
...
6
5
}:
7
6
{
8
-
disabledModules = [ "services/monitoring/beszel-agent.nix" ];
9
-
imports = [ "${pkgs-unstable.path}/nixos/modules/services/monitoring/beszel-agent.nix" ];
10
-
11
7
services.beszel.agent = {
12
8
enable = true;
13
9
openFirewall = true;
14
-
package = pkgs-unstable.beszel;
15
10
environmentFile = config.sops.templates."beszel-agent.env".path;
16
11
};
17
12
+1
-2
modules/beszel/hub.nix
+1
-2
modules/beszel/hub.nix
+1
-1
modules/common.nix
+1
-1
modules/common.nix
+1
-2
modules/matrix.nix
+1
-2
modules/matrix.nix
+1
-2
modules/minecraft.nix
+1
-2
modules/minecraft.nix
···
1
1
{
2
-
pkgs-unstable,
3
2
pkgs,
4
3
lib,
5
4
...
···
15
14
services.minecraft-server = {
16
15
enable = true;
17
16
eula = true;
18
-
package = pkgs-unstable.papermcServers.papermc-1_21_11;
17
+
package = pkgs.papermcServers.papermc-1_21_11;
19
18
dataDir = "/var/lib/minecraft";
20
19
openFirewall = true;
21
20
declarative = true;
+4
-3
modules/mumble.nix
+4
-3
modules/mumble.nix
···
1
-
{ config, ... }:
1
+
{ config, pkgs-stable, ... }:
2
2
{
3
3
services.murmur = {
4
4
enable = true;
5
+
package = pkgs-stable.murmur;
5
6
openFirewall = true;
6
7
hostName = ""; # binds all
7
8
port = 64738;
···
14
15
password = "$MUMBLE_PASSWORD";
15
16
users = 50;
16
17
17
-
sslCert = "${config.security.acme.certs."mumble.goo.garden".directory}/fullchain.pem";
18
-
sslKey = "${config.security.acme.certs."mumble.goo.garden".directory}/key.pem";
18
+
tls.certPath = "${config.security.acme.certs."mumble.goo.garden".directory}/fullchain.pem";
19
+
tls.keyPath = "${config.security.acme.certs."mumble.goo.garden".directory}/key.pem";
19
20
};
20
21
21
22
security.acme.certs."mumble.goo.garden" = {
+1
-5
modules/pocket-id.nix
+1
-5
modules/pocket-id.nix
···
1
-
{ config, pkgs-unstable, ... }:
1
+
{ config, ... }:
2
2
{
3
-
disabledModules = [ "services/security/pocket-id.nix" ];
4
-
imports = [ "${pkgs-unstable.path}/nixos/modules/services/security/pocket-id.nix" ];
5
-
6
3
services.pocket-id = {
7
4
enable = true;
8
-
package = pkgs-unstable.pocket-id;
9
5
settings = {
10
6
APP_URL = "https://id.goo.garden";
11
7
TRUST_PROXY = true;