mirror of
https://github.com/srid/nixos-config.git
synced 2026-07-16 22:01:33 +08:00
KISS NixOS configuration based on Flakes & flake-parts (supports macOS too)
293e53071c
Self-contained reference under
modules/nixos/linux/incus/incus-pet/example/hello-web/ that satisfies
the incus-pet contract in the smallest possible form:
- packages.<sys>.default a darkhttpd wrapper that serves a
one-page index.html, reading HOST/PORT
from the environment
- nixosModules.default services.hello-web.{enable, package,
host, port} + a DynamicUser=true systemd
unit
- nixosModules.incus the deploy contract: services.hello-web
bound to 8080, hostname "hello-web"
Useful as a copy-paste template for new apps. Less moving parts than
the anywhen reference (no bun, no SQLite, no state dir, no e2e tests
to keep green) — just three flake outputs and a static HTML response.
Live-deployed end-to-end on pureintent during this PR's bring-up:
$ incus-pet deploy path:./.../example/hello-web hello-web \
--port 8081 --listen 100.122.32.106
$ curl http://100.122.32.106:8081/
<!doctype html>
<h1>Hello from incus-pet</h1>
Idempotent re-deploy verified (no flags needed — host-port + listen
read back from container metadata; container name auto-detected from
incus.container.hostname).
|
||
|---|---|---|
| .vscode | ||
| AI | ||
| configurations | ||
| docs | ||
| doom.d | ||
| modules | ||
| overlays | ||
| packages | ||
| secrets | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .gitmodules | ||
| CLAUDE.md | ||
| config.nix | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
| vira.hs | ||
This is my Nix / NixOS configuration for all of my systems. See nixos-unified—specifically nixos-unified-template—if you wish to create your own configuration from scratch.
Setup
If you are using this repository as a starting template for your own configuration, perform these initial steps:
- Edit
config.nixin the repository root to set your primary user information (username,fullname,email,sshKey). - Replace the SSH keys in
secrets/secrets.nixwith your own, or delete the file if you do not useagenix. - Delete any files in
configurations/that you do not need, and create/rename files to match your hostnames.
After preparing your template, to install on a new machine running:
NixOS Linux
Tip
For a general tutorial, see https://nixos.asia/en/nixos-install-flake
- Install NixOS
- Hetzner dedicated from Linux Rescue system: https://github.com/numtide/nixos-anywhere (see blog post; example PR: https://github.com/srid/nixos-config/pull/35 where I had to configure networking manually)
- Copy from existing configuration (eg: ax41.nix)
- Make networking configuration changes.
- Run nixos-anywhere from a Linux system, targetting
root@<ip> - Wait for reboot;
ssh srid@<ip>; profit!
- Digital Ocean
- Legacy/manual approach: nixos-infect
- Modern/automate approach: Custom image + colerama; cf. Zulip and example
- X1 Carbon: https://srid.ca/x1c7-install
- Windows (via WSL): https://github.com/nix-community/NixOS-WSL
- Hetzner dedicated from Linux Rescue system: https://github.com/numtide/nixos-anywhere (see blog post; example PR: https://github.com/srid/nixos-config/pull/35 where I had to configure networking manually)
- Clone this repo anywhere
- Run
nix run. That's it. Re-open your terminal.
macOS
- Install Nix
- Clone this repo anywhere
- Run
nix run.1 That's it. Re-open your terminal.
Architecture
Start from flake.nix (see Flakes). flake-parts is used as the module system.
Directory layout
Tip
See
flake-module.nixfor autowiring of flake outputs based on this directory structure.
| Path | Corresponding flake output |
|---|---|
./configurations/{nixos,darwin,home}/foo.nix |
{nixos,darwin,home}Configurations.foo |
./mdules/{nixos,darwin,home,flake-parts}/foo.nix |
{nixos,darwin,home,flake}Modules.foo |
./overlays/foo.nix |
overlays.foo |
./packages |
N/A (Nix packages) |
./secrets |
N/A (agenix data) |
Tips
- To update NixOS (and other inputs) run
nix flake update- You may also update only primary inputs:
# nix run .#update
- You may also update only primary inputs:
- To free up disk space,
sudo nix-env -p /nix/var/nix/profiles/system --delete-generations +2 sudo nixos-rebuild boot - To autoformat the project tree using nixpkgs-fmt, run
just lintin Nix devShell. - To build all flake outputs (locally or in CI), run
nix run nixpkgs#omnix ci - For secrets management, I use agenix, because it works with SSH keys, and functions well on macOS and NixOS.
Discussion
https://github.com/srid/nixos-config/discussions
-
You might have to
rm -rf /etc/nix/nix.conf, so our flake.nix can do its thing. ↩︎