All my nix stuff, in a single flake
Find a file
William b106482e3c flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/42affa9d33750ac0a0a89761644af20d8d03e6ee?narHash=sha256-jkyo/9fZVB3F/PHk3fVK1ImxJBZ71DCOYZvAz4R4v4E%3D' (2026-03-05)
  → 'github:nix-community/disko/5ad85c82cc52264f4beddc934ba57f3789f28347?narHash=sha256-PAqwnsBSI9SVC2QugvQ3xeYCB0otOwCacB1ueQj2tgw%3D' (2026-03-19)
• Updated input 'disko/nixpkgs':
    'github:NixOS/nixpkgs/c0f3d81a7ddbc2b1332be0d8481a672b4f6004d6?narHash=sha256-MOH58F4AIbCkh6qlQcwMycyk5SWvsqnS/TCfnqDlpj4%3D' (2026-02-27)
  → 'github:NixOS/nixpkgs/f8573b9c935cfaa162dd62cc9e75ae2db86f85df?narHash=sha256-hpXH0z3K9xv0fHaje136KY872VT2T5uwxtezlAskQgY%3D' (2026-03-16)
• Updated input 'home-manager':
    'github:nix-community/home-manager/27b93804fbef1544cb07718d3f0a451f4c4cd6c0?narHash=sha256-Dp5Ir2u4jJDGCgeMRviHvEQDe%2BU37hMxp6RSNOoMMPc%3D' (2026-03-07)
  → 'github:nix-community/home-manager/7c046c63ac3b467c1d589b99d531da5b6520825a?narHash=sha256-3q1xsREjqdVIIwQQDZQ9y0YdBzP8gAxdwKoKnZSzJtU%3D' (2026-03-26)
• Updated input 'import-tree':
    'github:vic/import-tree/10fda59eee7d7970ec443b925f32a1bc7526648c?narHash=sha256-OQQ1MhB9t1J71b2wxRRTdH/Qd8UGG0p%2BdGspfCf5U1c%3D' (2026-03-01)
  → 'github:vic/import-tree/c41e7d58045f9057880b0d85e1152d6a4430dbf1?narHash=sha256-BtZ2dtkBdSUnFPPFc%2Bn0kcMbgaTxzFNPv2iaO326Ffg%3D' (2026-03-16)
• Updated input 'nix-ai-tools':
    'github:numtide/llm-agents.nix/a90b7a43af62a0732c7aba479fd493c777956aa0?narHash=sha256-hc6NZ0UlY5V1hHlrsCG%2BfJClReMJQCqW4SJ3Kq1SVK8%3D' (2026-03-06)
  → 'github:numtide/llm-agents.nix/8348bf988abbbafa5f105f819a6153f1dbe22a2e?narHash=sha256-Q2dh3zBu3oixlEWAbtXGL44O6jtEP/Tog0P44qu0RJY%3D' (2026-03-26)
• Updated input 'nix-ai-tools/nixpkgs':
    'github:NixOS/nixpkgs/917fec990948658ef1ccd07cef2a1ef060786846?narHash=sha256-au/m3%2BEuBLoSzWUCb64a/MZq6QUtOV8oC0D9tY2scPQ%3D' (2026-03-05)
  → 'github:NixOS/nixpkgs/fdc7b8f7b30fdbedec91b71ed82f36e1637483ed?narHash=sha256-a%2B%2BtZ1RQsDb1I0NHrFwdGuRlR5TORvCEUksM459wKUA%3D' (2026-03-23)
• Updated input 'nix-ai-tools/treefmt-nix':
    'github:numtide/treefmt-nix/3710e0e1218041bbad640352a0440114b1e10428?narHash=sha256-IjU1FxYqm%2BVDe5qIOxoW%2BpISBlGvVApRjiw/Y/ttJzY%3D' (2026-03-04)
  → 'github:numtide/treefmt-nix/71b125cd05fbfd78cab3e070b73544abe24c5016?narHash=sha256-6E/yhXP7Oy/NbXtf1ktzmU8SdVqJQ09HC/48ebEGBpk%3D' (2026-03-12)
• Updated input 'nix-index-database':
    'github:nix-community/nix-index-database/a2051ff239ce2e8a0148fa7a152903d9a78e854f?narHash=sha256-/PQ0ubBCMj/MVCWEI/XMStn55a8dIKsvztj4ZVLvUrQ%3D' (2026-03-01)
  → 'github:nix-community/nix-index-database/55b588747fa3d7fc351a11831c4b874dab992862?narHash=sha256-gdYe9wTPl4ignDyXUl1LlICWj41%2BS0GB5lG1fKP17%2BA%3D' (2026-03-22)
• Updated input 'nixos-cli':
    'github:nix-community/nixos-cli/0f09d374f22f197921d1753103985357d3626fcc?narHash=sha256-JRxinIHNvALYnNVuhnV2H8TU2nkDNTMaSlYbyUtvBV8%3D' (2026-03-04)
  → 'github:nix-community/nixos-cli/23e7540706eb5271f4ab37b9e52532637d57c63b?narHash=sha256-KtGThScvwNbCm%2B6XwUKRfpTjJVKV9SHswm29px3m4pw%3D' (2026-03-25)
• Updated input 'nixos-cli/flake-parts':
    'github:hercules-ci/flake-parts/57928607ea566b5db3ad13af0e57e921e6b12381?narHash=sha256-AnYjnFWgS49RlqX7LrC4uA%2BsCCDBj0Ry/WOJ5XWAsa0%3D' (2026-02-02)
  → 'github:hercules-ci/flake-parts/f20dc5d9b8027381c474144ecabc9034d6a839a3?narHash=sha256-rHuJtdcOjK7rAHpHphUb1iCvgkU3GpfvicLMwwnfMT0%3D' (2026-03-01)
• Updated input 'nixos-cli/flake-parts/nixpkgs-lib':
    'github:nix-community/nixpkgs.lib/72716169fe93074c333e8d0173151350670b824c?narHash=sha256-cBEymOf4/o3FD5AZnzC3J9hLbiZ%2BQDT/KDuyHXVJOpM%3D' (2026-02-01)
  → 'github:nix-community/nixpkgs.lib/c185c7a5e5dd8f9add5b2f8ebeff00888b070742?narHash=sha256-e%2B/T/pmEkLP6BHhYjx6GmwP5ivonQQn0bJdH9YrRB%2BQ%3D' (2026-03-01)
• Updated input 'nixos-cli/nixpkgs':
    'github:NixOS/nixpkgs/c0f3d81a7ddbc2b1332be0d8481a672b4f6004d6?narHash=sha256-MOH58F4AIbCkh6qlQcwMycyk5SWvsqnS/TCfnqDlpj4%3D' (2026-02-27)
  → 'github:NixOS/nixpkgs/608d0cadfed240589a7eea422407a547ad626a14?narHash=sha256-M0yS4AafhKxPPmOHGqIV0iKxgNO8bHDWdl1kOwGBwRY%3D' (2026-03-08)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/80bdc1e5ce51f56b19791b52b2901187931f5353?narHash=sha256-QKyJ0QGWBn6r0invrMAK8dmJoBYWoOWy7lN%2BUHzW1jc%3D' (2026-03-04)
  → 'github:nixos/nixpkgs/46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9?narHash=sha256-4hAV26quOxdC6iyG7kYaZcM3VOskcPUrdCQd/nx8obc%3D' (2026-03-24)
• Updated input 'nixpkgs-stable':
    'github:nixos/nixpkgs/fabb8c9deee281e50b1065002c9828f2cf7b2239?narHash=sha256-YaHht/C35INEX3DeJQNWjNaTcPjYmBwwjFJ2jdtr%2B5U%3D' (2026-03-04)
  → 'github:nixos/nixpkgs/1073dad219cb244572b74da2b20c7fe39cb3fa9e?narHash=sha256-tFwzTI0DdDzovdE9%2BRas6CUss0yn8P9XV4Ja6RjA%2BnU%3D' (2026-03-24)
• Updated input 'noctalia':
    'github:noctalia-dev/noctalia-shell/b47a6e22bb5e009a3696cc383c87c67be9b08919?narHash=sha256-TfIfbElVko7AKfbT48PIdOlhqcWjBFYF5AFrm5KLHjM%3D' (2026-03-07)
  → 'github:noctalia-dev/noctalia-shell/f19a19cfc6dcf2cd73b1d9d11460cbe363b0c967?narHash=sha256-1aPBtIO74L/S4ymQ//qgWJfjknjpAlKEPULOL833wOc%3D' (2026-03-27)
• Updated input 'noctalia/noctalia-qs':
    'github:noctalia-dev/noctalia-qs/f8531192cd09b9ea2e78d18e9cfc9d3dba498690?narHash=sha256-TLHXPoELZA6VeuzC1Zpx%2BMnSsYzrJs%2BDSieMgfjAOJc%3D' (2026-03-05)
  → 'github:noctalia-dev/noctalia-qs/070340934ca374bc770fd500a0fd7b3210f06b1c?narHash=sha256-N131zILQ06ZNEvtgtjjFZ0N5qEI70rKKhCZsBcZoDH8%3D' (2026-03-26)
• Added input 'noctalia/noctalia-qs/systems':
    'github:nix-systems/default-linux/31732fcf5e8fea42e59c2488ad31a0e651500f68?narHash=sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80%3D' (2023-07-14)
• Added input 'noctalia/noctalia-qs/treefmt-nix':
    'github:numtide/treefmt-nix/3710e0e1218041bbad640352a0440114b1e10428?narHash=sha256-IjU1FxYqm%2BVDe5qIOxoW%2BpISBlGvVApRjiw/Y/ttJzY%3D' (2026-03-04)
• Added input 'noctalia/noctalia-qs/treefmt-nix/nixpkgs':
    follows 'noctalia/noctalia-qs/nixpkgs'
• Updated input 'stylix':
    'github:danth/stylix/c4b8e80a1020e09a1f081ad0f98ce804a6e85acf?narHash=sha256-pAtzPsgHRKw/2Kv8HgAjSJg450FDldHPWsP3AKG/Xj0%3D' (2026-02-28)
  → 'github:danth/stylix/e31c79f571c5595a155f84b9d77ce53a84745494?narHash=sha256-Poz9WTjiRlqZIf197CrMMJfTifZhrZpbHFv0eU1Nhtg%3D' (2026-03-21)
• Updated input 'terranix':
    'github:terranix/terranix/39fce702d8f2e4b076ba8e83ef93bd29db560dd5?narHash=sha256-XD65bXPDbl1BVryeapZAbzi%2BGNKj3nUTRYhe64MdaEY%3D' (2026-03-02)
  → 'github:terranix/terranix/306ce146bf0324dc3b3c45c095036b6f0e26bf35?narHash=sha256-6KFxpxyXjcqhOexc7ZeaXVWdDtGb6zO8HtjBEci9DfU%3D' (2026-03-16)
• Updated input 'vicinae':
    'github:vicinaehq/vicinae/ca1067afd8c1a3707f1aaf6eb64e980539945b43?narHash=sha256-jwEFqCHrNMiguDLgoUJnc48Kd/hz4rmSiVC3r9NKBIo%3D' (2026-03-05)
  → 'github:vicinaehq/vicinae/5f7d3d62bb2c38181e0289fa0e3b43dfec206bfd?narHash=sha256-QsfXRSRyptJ91/rXobWpmZRC/TBT69Stmok1sXqDpa0%3D' (2026-03-25)
• Updated input 'zen-browser':
    'github:0xc000022070/zen-browser-flake/5f8f34c0dd56808ecbfa35697353c455e4a416b3?narHash=sha256-OCEb6jXTvhnMTMqMLleYChekDO/zh%2BVtunBAS0WevPM%3D' (2026-03-06)
  → 'github:0xc000022070/zen-browser-flake/2e49c5278af6ef5f1e17e0fd27c2e22b1a7edc38?narHash=sha256-WyPQoYBde7TSCR45ZgofzBqvVo/MpH3Vkh8YMj9OZC0%3D' (2026-03-25)
• Updated input 'zen-browser/home-manager':
    'github:nix-community/home-manager/58fd7ff0eec2cda43e705c4c0585729ec471d400?narHash=sha256-UZjPc/d5XRxvjDbk4veAO4XFdvx6BUum2l40V688Xq8%3D' (2026-03-01)
  → 'github:nix-community/home-manager/ef12a9a2b0f77c8fa3dda1e7e494fca668909056?narHash=sha256-MPjR48roW7CUMU6lu0%2BqQGqj92Kuh3paIulMWFZy%2BNQ%3D' (2026-03-13)
• Updated input 'zen-browser/nixpkgs':
    'github:nixos/nixpkgs/dd9b079222d43e1943b6ebd802f04fd959dc8e61?narHash=sha256-I45esRSssFtJ8p/gLHUZ1OUaaTaVLluNkABkk6arQwE%3D' (2026-02-27)
  → 'github:nixos/nixpkgs/c06b4ae3d6599a672a6210b7021d699c351eebda?narHash=sha256-wvfdLLWJ2I9oEpDd9PfMA8osfIZicoQ5MT1jIwNs9Tk%3D' (2026-03-13)
2026-03-26 22:36:55 -03:00
aspects back to plasma we go 2026-03-26 07:50:31 -03:00
data add data/services.nix for shared service definitions 2026-02-06 22:46:49 -03:00
packages add niri-auto-centre script 2026-02-16 11:59:32 -03:00
secrets forgejo: disable singup; document root password 2025-11-09 10:34:57 -03:00
shells 'system' has been renamed to/replaced by 'stdenv.hostPlatform.system' 2026-02-18 16:08:53 -03:00
terranix nixfmt 2026-02-12 18:50:38 -03:00
.envrc simplify .envrc 2024-09-25 08:43:28 -03:00
.gitignore dns records only for actual services 2025-11-09 13:37:04 -03:00
flake.lock flake.lock: Update 2026-03-26 22:36:55 -03:00
flake.nix determinate nix breaks my systems 2026-02-19 09:10:44 -03:00
readme.md Update readme.md 2026-02-19 18:32:43 -03:00

NixOS Flake Configuration

Modular NixOS configuration using flake-parts with the dendritic pattern.

Structure

.
├── aspects/           # Reusable NixOS/home-manager modules (dendritic)
│   ├── base/          # Base system configuration
│   ├── hosts/         # Host-specific configurations
│   │   ├── _alexandria/
│   │   ├── _io/
│   │   ├── _rotterdam/
│   │   └── _trantor/
│   ├── systems/       # System type modules (desktop, server, cli, gaming)
│   └── users/         # User account configurations
├── data/              # Shared host/service definitions
├── packages/          # Custom packages and overlays
├── shells/            # Shell configurations
└── terranix/          # Terraform configurations for cloud resources

Hosts

Host Architecture Type Description
trantor aarch64-linux server ARM server running Forgejo
alexandria x86_64-linux server x86 server (Kanidm, Vaultwarden, Nextcloud, Jellyfin)
rotterdam x86_64-linux desktop Main workstation setup for gaming
io x86_64-linux desktop Workstation

Services

  • git.baduhai.dev (Forgejo) - Publicly accessible on trantor

Other services (LAN/Tailscale only): Vaultwarden, Nextcloud, Jellyfin

Features

  • Ephemeral root: Automatic btrfs subvolume rollover with impermanence
  • Secrets: Managed via agenix with age encryption
  • Disk management: disko for declarative disk partitioning
  • Modular architecture: Each aspect is a separate module imported via import-tree
  • Dendritic pattern: Aspects are imported as a unified flake module

Building

# Build specific host
nix build .#nixosConfigurations.trantor.config.system.build.toplevel

# Rebuild host (if using nixos-cli on the host)
sudo nixos apply

Terranix

Terraform configurations for cloud infrastructure managed via terranix:

  • baduhai.dev DNS on CloudFlare
  • VPS provisioning on OCI
  • Tailscale subnet routers

Key Dependencies

  • nixpkgs (nixos-unstable for workstations, nixos for servers)
  • home-manager
  • agenix
  • disko
  • impermanence
  • nix-flatpak
  • nixos-cli