harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-15 05:02:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
my nix config
202 commits 71 branches 0 tags 4.7 MiB
Find a file
Exact
Harivansh Rathi facb0e7b94 simplify pi setup 
remove attach function
2026-04-03 03:34:50 +00:00
.github/workflows fix sync script bugs, remove auto-merge workflow (#36) 2026-04-02 04:06:14 +00:00
config remove nvim font size it doesnt work without guinvim 2026-04-02 23:07:29 -04:00
home simplify pi setup 2026-04-03 03:34:50 +00:00
hosts simplify pi setup 2026-04-03 03:34:50 +00:00
lib add pnpm to core package set (#45) 2026-04-02 23:07:56 +00:00
modules smb hostname truncate + hard limit (#29) 2026-04-01 21:34:59 +00:00
scripts merge synced agent history into netty defaults (#43) 2026-04-02 22:04:52 +00:00
.gitignore nvim fix 2026-03-31 00:09:59 -04:00
flake.lock optimize the shit out of theme loading 2026-03-30 23:44:32 -04:00
flake.nix optimize the shit out of theme loading 2026-03-30 23:44:32 -04:00
justfile sync/search agent history (#40) 2026-04-02 21:07:10 +00:00
README.md readme and alias (#50) 2026-04-03 02:39:15 +00:00

README.md

Nix Leveraging

Single dependency graph that owns a macOs laptop and a Linux KVM. Both collapse into the same reproducible interface.

The darwin host composes nix-darwin, home-manager, and nix-homebrew. The netty host composes nixosSystem, disko, and home-manager.

Global username, per-host metadata and feature flags are encoded as data so leaf modules never need ad hoc platform checks.

The machine surface is split into core, extras, and fonts.

claude-code-nix, neovim-nightly, disko, and nix-homebrew are pinned in the flake

Home Manager is the userland control plane. Rust, Go, Node, Python, AWS, and some other tools are routed into XDG-compliant paths. SSH and GPG permissions are locked down on every activation.

A migration module handles the cutover from legacy symlinks so nothing is left to clean up manually.

A single palette drives colors for Ghostty, tmux, fzf, zsh syntax highlighting, bat, and delta. A generated theme script hot-swaps light and dark across all of them.

Tool configs are repo-owned rather than scattered across $HOME. Global agent skills are installed declaratively using skills.sh and only resync when the manifest hash changes.

Secrets live in Bitwarden and are rendered at activation time using cli Deployment is just switch for the laptop and just switch-netty for the server.

All PRs auto-merge on creation if tests pass

The KVM has a declarative service bundle:

  • netty exposes 3 tcp ports (22:ssh, 80:http, 443:https)
  • services only listen on 127.0.0.1 (runs behind nginx with ACME)
  • Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
  • Self hosts VaultWarden
  • betterNAS control-plane and node agent (api.betternas.com)
  • pi-coding-agent in dtach (pa alias for attaching)