A collection of machine configurations, expressed in Nix

This repository is based on Nix Flakes, an experimental feature of Nix that solves some of the problems around hermeticism. To learn more about Flakes, I highly recommend reading the “Nix Flakes” series by Eelco himself:

• Part 1
• Part 2
• Part 3

With the absence of some tooling in nixpkgs, the Darwin machines defined in this repository lean on nix-darwin’s Homebrew module to manage some packages, App Store apps, and macOS Applications. For this to work, Homebrew must be installed.

Don’t forget to turn off analytics!

brew analytics off

For management of remote systems, I use serokell/deploy-rs. For ease of deployment, this repo hosts a nightly pipeline that builds the deploy binary for the various system architectures.

For secret management, I use Mic92/sops-nix. For ease of deployment, this repo hosts a nightly pipeline that builds the sops-install-secrets binary for the various system architectures.

There are several machines defined in flake.nix

As you might’ve guessed from the name, this is my personal MacBook. It provides a darwin environment of which every aspect is expressed, including: yabai, spacebar, skhd, Firefox profiles with a minimal theme (à la surf/xombrero), nightly Emacs (with native comp, WebKit support, libvterm), literate Emacs config with declarative use-package statements, an mbsync module for mail retrieval for use with mu4e, declarative Homebrew packages/casks for macOS Application installation, and various other pieces.

My work MacBook. The same as macbook but with some work specific configuration layered on top.

A Raspberry Pi 4 that acts as a DHCP (ISC) server, DNS (unbound) server, proxy (nginx) server for upstream media services, and Wireguard gateway for my home network.

3 Intel NUCs that occupy 1u in my cabinet. The workhorses of my home lab. They’ve been through many iterations of running Kubernetes & Nomad, but now they’re just running various media management services.