forked from emily/nixfiles
nix infra
emily
ffcfcd0be3
Flake lock file updates: • Updated input 'stylix': 'github:danth/stylix/f9b9bc7c8e69942cd2583a3309f86fc5260f1275?narHash=sha256-2HFQm/gpmxtMokn6pInHlTlU7mBONLb3Y1aN8SlY0tc%3D' (2024-04-03) → 'github:danth/stylix/197526923a2929b223bab3e36d3aa240f5f84870?narHash=sha256-zIrOcHX5iMc4/Z5TSOzSSdRlE4JzFAIlUGPO6f%2Bck1M%3D' (2024-05-09) • Removed input 'stylix/base16-alacritty' • Removed input 'stylix/base16-alacritty-yaml' • Updated input 'stylix/gnome-shell': 'github:GNOME/gnome-shell/a7c169c6c29cf02a4c392fa0acbbc5f5072823e7?narHash=sha256-/TIkZ8y5Wv3QHLFp79Poao9fINurKs5pa4z0CRe%2BF8s%3D' (2023-10-31) → 'github:GNOME/gnome-shell/0d0aadf013f78a7f7f1dc984d0d812971864b934?narHash=sha256-zYP1ehjtcV8fo%2Bc%2BJFfkAqktZ384Y%2By779fzmR9lQAU%3D' (2024-04-21) |
||
---|---|---|
config | ||
lib/shinyflakes | ||
modules | ||
pkgs | ||
secrets/services | ||
.gitignore | ||
.sops.yaml | ||
flake.lock | ||
flake.nix | ||
README.md |
emilys Nix Infra
First deployment
remote hosts
$ nix run github:nix-community/nixos-anywhere -- --flake ".#<configuration>" root@<target-host>
desktops
$ nix --extra-experimental-features nix-command run github:nix-community/nixos-anywhere -- --flake "git+https://git.bsd.gay/snaki/nixfiles.git#<configuration>" --no-reboot --build-on-target root@127.0.0.1
$ nixos-enter
$ passwd <local-user>
reboot
$ git clone https://git.bsd.gay/snaki/nixfiles.git
$ colmena apply-local --sudo --node <node>
Deploy changes on ...
all hosts
$ colmena apply --on @production
routers only
$ colmena apply --on @router
Structure
nixfiles
├── config # NixOS configuration
│ ├── common # configuration applyed to all hosts (some settings might be influenced by machine-type)
│ │ └── users # user configuration
│ ├── hosts # configuration for specific hosts
│ ├── profiles # configuariotn for specific machine types
│ └── services # common service configuration
├── lib # helper functions
├── modules # NixOS modules
└── pkgs # nixpkgs overlays