Skip to content

Nix flakes configuration for most of my devices

Notifications You must be signed in to change notification settings

humaidq/dotfiles

Repository files navigation

sifrOS: My Secure NixOS Configuration

NixOS Flake Wayland By Default secrets sops-nix

Goal

sifrOS should be a secure, minimal, and modular NixOS framework tailored to my use case.

Features

  • Properly configured desktop environment with Gnome and useful desktop apps.
  • Neovim (NixVim) configured with LSP, telescope, and other QoL plugins.
  • Secrets management with sops-nix.
  • Browser configured with uBlock Origin, DuckDuckGo, and other extensions.
  • Shell configured with modern tools & improvements, such as nix-direnv, zoxide, eza, zsh-autocomplete, ls-colors, useful aliases, and more.
  • Tailscale with auto-authentication (using sops-nix).
  • Home Lab setup
    • Logging and monitoring using Grafana
    • AdGuard Home configured
    • Media server
  • Web server for my personal website and other services.
  • "Server Mode" specialisation for laptops.
  • System hardening for kernel, web server, etc.

Hosts

Systems managed by this flake.

Name System CPU RAM GPU Role OS State
serow ThinkPad T590 i7-8565U 16GB Intel UHD 8th Gen 💻️ ❄️
tahr ThinkPad P1 Gen3 i9-10885H 32GB NVIDIA Quadro T2000 💻️ ❄️
takin MacBook Pro M2 Max 64GB M2 Max 💻️ 🚧
goral VMWare Fusion M2 Max 64GB M2 Max 💻️ ❄️
duisk Vultr VPS vCPU 4GB None ☁️ ❄️
argali RPi 4B BCM2711 8GB None ☁️ ❄️
arkelli RPi 4B BCM2711 8GB None ☁️ ❄️
boerbok Star64 SiFive 8GB None ☁️ ❄️ 🚧

Rebuilding a system:

sudo nixos-rebuild switch --flake github:humaidq/dotfiles#<hostname> --refresh

Bootstrapping

x86 Machine

Build and flash the installer image:

nix build github:humaidq/dotfiles#installer
sudo cp ./result/iso/*.iso /dev/sdX

Alternatively, this ISO works with Ventoy.

After booting, either partition manually or use the disko configuration. Copy the hardware configuration and configure the host on another machine, push it to the repository.

Then you may finally install with:

sudo nixos-install --root /mnt --flake github:humaidq/dotfiles#<host>

Raspberry Pi

Build and flash the SD card image:

nix build github:humaidq/dotfiles#packages.aarch64-linux.rpi4-bootstrap
sudo cp ./result/*.img /dev/mmcblkX

When booted, the image should auto-resize to fill the card. You should be able to SSH into the device using SSH key.

Once a new host is configured for this machine, simply rebuild the system directly from the GitHub repository.

Don't forget to add the age public key into .sops.yaml and update the keys.

macOS Setup & Usage

Install Nix using the Determinate Systems installer.

curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install

Then run the following (without sudo):

darwin-rebuild switch --flake github:humaidq/dotfiles#takin --refresh

About

Nix flakes configuration for most of my devices

Resources

Stars

Watchers

Forks

Releases

No releases published

Languages