800a4d70e5
Flake lock file updates:
• Updated input 'disko':
'github:nix-community/disko/511388d837178979de66d14ca4a2ebd5f7991cd3?narHash=sha256-GSqAwa00%2BvRuHbq9O/yRv7Ov7W/pcMLis3HmeHv8a%2BQ%3D' (2024-08-29)
→ 'github:nix-community/disko/e55f9a8678adc02024a4877c2a403e3f6daf24fe?narHash=sha256-tqoAO8oT6zEUDXte98cvA1saU9%2B1dLJQe3pMKLXv8ps%3D' (2024-09-03)
• Updated input 'nixhw':
'github:alyraffauf/nixhw/3f33aea40f57cd7c70d20d5f1287c1608875f09a?narHash=sha256-nroB7b4ichwwAZkTUg%2BTnbu2UiB1Xj8J94vtWzGIL9w%3D' (2024-08-26)
→ 'github:alyraffauf/nixhw/088329ffec596ca2f1abb94c3aa47ee5cf059f7b?narHash=sha256-IoaJO9Lrx3%2Bax4EWUsS5i4uzhf82K8kkWKwmuvpQCxM%3D' (2024-09-02)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/6e99f2a27d600612004fbd2c3282d614bfee6421?narHash=sha256-eV%2B63gK0Mp7ygCR0Oy4yIYSNcum2VQwnZamHxYTNi%2BM%3D' (2024-08-30)
→ 'github:nixos/nixpkgs/6f6c45b5134a8ee2e465164811e451dcb5ad86e3?narHash=sha256-tiN5Rlg/jiY0tyky%2BsoJZoRzLKbPyIdlQ77xVgREDNM%3D' (2024-09-03)
• Updated input 'nixpkgs-unstable':
'github:nixos/nixpkgs/71e91c409d1e654808b2621f28a327acfdad8dc2?narHash=sha256-GnR7/ibgIH1vhoy8cYdmXE6iyZqKqFxQSVkFgosBh6w%3D' (2024-08-28)
→ 'github:nixos/nixpkgs/ad416d066ca1222956472ab7d0555a6946746a80?narHash=sha256-%2Byj%2BxgsfZaErbfYM3T%2BQvEE2hU7UuE%2BJf0fJCJ8uPS0%3D' (2024-09-04)
• Updated input 'nur':
'github:nix-community/NUR/1849c24c5cf2b01b58bb38654a2b54a3d861c0b6?narHash=sha256-aG318RTey%2BzjzJvUHBmJJYZBp1O0%2Bcu7IihXi%2Bj0jCA%3D' (2024-08-31)
→ 'github:nix-community/NUR/56ac09608ecc70b3dd28ecef76cbc167849dd5e2?narHash=sha256-qnfZ8Ei3STWFoOWN4UJTDmyoqa0oprlklv3h9N34oj8%3D' (2024-09-06)
• Updated input 'stylix':
'github:danth/stylix/6c895c6b42ca205017abe72a7263baf36a197972?narHash=sha256-bP1/BHbEigLjTTmqyy1t8w5EVWHuLuABtOd/BBXVLtA%3D' (2024-08-26)
→ 'github:danth/stylix/ef81ad9e85e60420cc83d4642619c14b57139d33?narHash=sha256-%2BjwXF9KI0HfvDgpsoJGvOdfOGGSKOrID1wQB79zjUbo%3D' (2024-09-02)
|
||
|---|---|---|
| .github/workflows | ||
| _img | ||
| common | ||
| flake | ||
| homeManagerModules | ||
| homes | ||
| hosts | ||
| nixosModules | ||
| secrets | ||
| userModules | ||
| .envrc | ||
| .gitignore | ||
| .gitlab-ci.yml | ||
| flake.lock | ||
| flake.nix | ||
| LICENSE.md | ||
| README.md | ||
| update_fetchgit.sh | ||
nixos
My comprehensive NixOS flake for managing my laptop, desktop, and home lab environments.
Features
- Hyprland: Dynamic tiling Wayland compositor and window manager.
- Stylix: Auto-gnerated base16 themes for the whole desktop.
- Encryption: Encrypted boot drives with Secure Boot and LUKS with TPM decryption.
- Home Lab: Media, file sharing, and more with a efficnet routing via reverse proxy.
Inputs
This flake takes a variety of upstream and third party flakes as inputs:
- agenix: secrets storage and orchestration.
- disko: declarative partitions and disk configuration.
- home-manager: declarative dotfile and user package management.
- hyprland: great dynamic tiling wayland compositor.
- iio-hyprland: autorotate daemon for Hyprland.
- lanzaboote: secure boot for NixOS.
- nixhw: opinionated set of generic (AMD, Intel, Laptop, SSD) and specific (Framework 13, Yoga 9i, Thinkpad T440p) hardware configuration modules for NixOS.
- nur: extra packages from the nix user repository.
- stylix: system-wide colorscheming and typography.
- sway: fantastic, rock-solid tiling compositor for wayland.
Outputs
- homeManagerModules.default: app modules + everything you need for a competent Hyprland desktop (and a few others).
- homeManagerModules.aly: my home-manager config.
- homeManagerModules.aly-nox: my home-manager config, but for headless systems.
- homeManagerModules.dustin: my husband's home-manager config.
- nixosModules.common: various common modules specific to my hosts.
- nixosModules.nixos: opinionated desktop, app, and service options.
- nixosModules.users: basic user configuration options.
In addition, this flake outputs NixOS configuration and home-manager configurations for all of my hosts and users, respectively.
Deploying to NixOS
Each hardware configuration is host-specific. If you fork this repository, add a host configuration for your own hardware. Secrets are encrypted with agenix and will not be available without the private decryption keys.
Enabling Flakes
While widely used and considered stable, flakes are still considered experimental. To enable Flakes, add the following lines to your configuration.nix and rebuild.
nix.settings.experimental-features = [ "nix-command" "flakes" ];
Alternatively, pass --experimental-features "nix-command flakes" to nix to temporarily use flakes.
Building Flake
In order to deploy this Flake on your host, run the following command:
sudo nixos-rebuild boot --flake github:alyraffauf/nixcfg#$HOSTNAME
Substitute $HOSTNAME for whichever hostname you have chosen. Reboot to apply the flake's configuration for the chosen host.
Installing from Live USB
If you want to install NixOS from this flake, run the following commands, ideally from a NixOS live environment, providing the hostname associated with a NixOS configuration specified in flake.nix when prompted.
sudo nix --experimental-features "nix-command flakes" run github:alyraffauf/nixcfg