Nixos configuration

Find a file

Tigor Hutasuhut d85d2eeaf2 nginx: uses same ACME host to reduce the number of certs and avoid rate limits		2024-11-24 21:31:04 +07:00
hardware-configuration	nginx: uses same ACME host to reduce the number of certs and avoid rate	2024-11-24 21:31:04 +07:00
home	zsh: auto-complete now uses not crashing version	2024-11-24 20:18:35 +07:00
options	prepare nginx migration	2024-11-24 20:16:30 +07:00
profiles	homeserver: disabled unused services	2024-11-24 20:20:41 +07:00
scripts/hyprland	format: format codebase using nixfmt-rfc-style	2024-10-21 12:31:30 +07:00
secrets	nginx: uses same ACME host to reduce the number of certs and avoid rate	2024-11-24 21:31:04 +07:00
system	nginx: uses same ACME host to reduce the number of certs and avoid rate	2024-11-24 21:31:04 +07:00
.sops.yaml	sops: added new secret file for caddy	2024-06-13 13:28:08 +07:00
flake.lock	zen-browser: update flake source	2024-11-24 13:56:59 +07:00
flake.nix	zen-browser: update flake source	2024-11-24 13:56:59 +07:00
LICENSE	Initial commit	2024-06-12 09:51:27 +07:00
README.md	docs: added README.md	2024-06-12 11:15:15 +07:00

README.md

Nixos Configuration

Nixos Configuration Repository

Directories

`hardware-configuration`

Contains the hardware configuration for each machine.

`profiles`

Control plane for each machine. Each profile contains the configuration and features to be enabled for each machine.

`home`

Contains the configuration/implementation at user level. As much as possible, configuration should be done in here to reduce surface of attack in the system, unless requiring system-wide access like dbus or kernel modules, or root needs access to the programs.

`options`

Contains the options definition to toggle features in the system. Used by profiles to enable or disable features.

Options are meant to be shared between system and home. Hence, why the definitions are put in their own folder.

`secrets`

Contains the secrets for the system. Uses sops-nix to encrypt the secrets.

`system`

Contains system-wide configuration and implementation. Unless requiring system access, it's discouraged to put extended configurations here. Only parts that require system access allowed to be here.

Installation

Fresh Installation

On new machine, copy this repo, copy the hardware-configuration.nix from /etc/nixos/hardware-configuration.nix to ./hardware-configuration/<hostname>.nix.

If creating new profile and hostname, create a new <profile>.nix in ./profiles and create a new nixosConfiguration.<hostname> option in flake.nix and re-target the profile-path and hardware-configuration variable (specialArgs) to the new files.

Mount the root drive to /mnt, then run the following command:

nixos-install --flake /path/to/repository#<hostname>

Reinstall

If fresh from installation disk, Mount the target disk to /mnt and run the following command (Only on reinstalls):

nixos-install --flake https://github.com/tigorlazuardi/nixos#<hostname>

# There are 2 hostnames available in this repo: 'castle' or 'fort'

From Existing Installation

Same steps as Fresh Installation, but no need to mount the root drive.

Then run the following command:

sudo nixos-rebuild switch --flake /path/to/repository#<hostname>