harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-15 05:02:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
my nix config
181 commits 71 branches 0 tags 4.7 MiB
Find a file
Exact
Harivansh Rathi fd79908ad2 split netty configuration.nix into per-service modules, remove sandbox-agent 
Break the monolithic 495-line configuration.nix into focused modules:
- forgejo.nix: Forgejo service, git user, mirror sync timer
- betternas.nix: control-plane + node agent services
- vaultwarden.nix: Vaultwarden service
- nginx.nix: ACME + all Nginx virtualHosts

Remove sandbox-agent entirely (service, CORS proxy, package).
Keep netty.harivan.sh vhost reserved for future use.
2026-04-01 23:07:53 -04:00
.github/workflows add auto-merge workflow for all PRs (#24) 2026-04-01 18:33:21 +00:00
config fix canola load path (#21) 2026-04-01 03:55:03 +00:00
home key swap + ssh (#17) 2026-03-31 23:20:51 +00:00
hosts split netty configuration.nix into per-service modules, remove sandbox-agent 2026-04-01 23:07:53 -04:00
lib rm (#25) 2026-04-01 19:54:03 +00:00
modules smb hostname truncate + hard limit (#29) 2026-04-01 21:34:59 +00:00
scripts key swap + ssh (#17) 2026-03-31 23:20:51 +00:00
.gitignore nvim fix 2026-03-31 00:09:59 -04:00
flake.lock optimize the shit out of theme loading 2026-03-30 23:44:32 -04:00
flake.nix optimize the shit out of theme loading 2026-03-30 23:44:32 -04:00
justfile update justfile and nvim treesitter nightly mismatch (#14) 2026-03-31 21:06:59 +00:00
README.md split netty configuration.nix into per-service modules, remove sandbox-agent 2026-04-01 23:07:53 -04:00

README.md

Nix Leveraging

Single dependency graph that owns a macOs laptop and a Linux KVM. Both collapse into the same reproducible interface.

The darwin host composes nix-darwin, home-manager, and nix-homebrew. The netty host composes nixosSystem, disko, and home-manager.

Global username, per-host metadata and feature flags are encoded as data so leaf modules never need ad hoc platform checks.

The machine surface is split into core, extras, and fonts.

claude-code-nix, neovim-nightly, disko, and nix-homebrew are pinned in the flake

Home Manager is the userland control plane. Rust, Go, Node, Python, AWS, and some other tools are routed into XDG-compliant paths. SSH and GPG permissions are locked down on every activation.

A migration module handles the cutover from legacy symlinks so nothing is left to clean up manually.

A single palette drives colors for Ghostty, tmux, fzf, zsh syntax highlighting, bat, and delta. A generated theme script hot-swaps light and dark across all of them.

Tool configs are repo-owned rather than scattered across $HOME. Global agent skills are installed declaratively using skills.sh and only resync when the manifest hash changes.

Secrets live in Bitwarden and are rendered at activation time using cli Deployment is just switch for the laptop and just switch-netty for the server.

All PRs auto-merge on creation if tests pass

The VPS has a declarative service bundle:

  • netty exposes 3 tcp ports (22:ssh, 80:http, 443:https)
  • services only listen on 127.0.0.1 (runs behind nginx with ACME)
  • Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
  • Self hosts VaultWarden
  • betterNAS control-plane and node agent (api.betternas.com)