My NixOS configuration files
Find a file
Katherina Walshe-Grey 5b31d5fea7 flake.lock: Update
Flake lock file updates:

• Updated input 'agenix':
    'github:ryantm/agenix/2f0f812f69f3eb4140157fe15e12739adf82e32a' (2025-10-19)
  → 'github:ryantm/agenix/9ba0d85de3eaa7afeab493fed622008b6e4924f5' (2025-10-28)
• Updated input 'home-manager-unstable':
    'github:nix-community/home-manager/c644cb018f9fdec55f5ac2afb4713a8c7beb757c' (2025-10-24)
  → 'github:nix-community/home-manager/d47259b685b1145b610fd8c28e7498304a97fa78' (2025-10-28)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/c8aa8cc00a5cb57fada0851a038d35c08a36a2bb' (2025-10-22)
  → 'github:NixOS/nixpkgs/78e34d1667d32d8a0ffc3eba4591ff256e80576e' (2025-10-26)
• Updated input 'nixpkgs-small':
    'github:NixOS/nixpkgs/e7b2e554a77018dec2f259b782d062500c133d49' (2025-10-24)
  → 'github:NixOS/nixpkgs/daf6dc47aa4b44791372d6139ab7b25269184d55' (2025-10-27)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/01f116e4df6a15f4ccdffb1bcd41096869fb385c' (2025-10-22)
  → 'github:NixOS/nixpkgs/6a08e6bb4e46ff7fcbb53d409b253f6bad8a28ce' (2025-10-25)
• Updated input 'nixpkgs-unstable-small':
    'github:NixOS/nixpkgs/642fae6c6a7fbd9b9a61e2d3fc849c99bb4d485a' (2025-10-24)
  → 'github:NixOS/nixpkgs/a0b0d4b52b5f375658ca8371dc49bff171dbda91' (2025-10-28)
• Updated input 'randomcat':
    'github:randomnetcat/nix-configs/f1963827395d6c82a7e64267fde9b0c82da02380' (2025-10-23)
  → 'github:randomnetcat/nix-configs/8da634986d2ec81582854db6d185d104940d8bac' (2025-10-28)
2025-10-28 14:12:08 +00:00
common boot: Remove pde_set_flags patch since it landed in upstream 2025-10-25 00:44:46 +01:00
flake backup: Offload DNS & SSH host key to other modules 2025-06-09 23:25:53 +01:00
home/qenya qenya/firefox: Add NetrunnerDB as search engine 2025-10-26 17:04:28 +00:00
hosts kilgharrah: Install Heroic Games Launcher 2025-10-24 23:38:20 +01:00
secrets treewide: Remove birdsong in favour of Tailscale 2025-06-09 16:58:28 +01:00
services reverse-proxy: Init new module to simplify nginx reverse proxies 2025-09-16 19:01:56 +01:00
.envrc qenya/zsh: use direnv to load local dev shells 2025-02-26 11:07:53 +00:00
.gitignore Initial Ansible setup 2025-10-05 15:50:21 +01:00
flake.lock flake.lock: Update 2025-10-28 14:12:08 +00:00
flake.nix Initial Ansible setup 2025-10-05 15:50:21 +01:00
inventory.yaml Initial Ansible setup 2025-10-05 15:50:21 +01:00
keys.nix ssh: Read host keys from data file; rename from openssh 2025-06-09 18:02:02 +01:00
LICENSE Initial commit 2024-05-23 15:01:57 +00:00
playbook.yaml Initial Ansible setup 2025-10-05 15:50:21 +01:00
README.md Update README.md 2025-03-15 19:58:34 +00:00
secrets.nix treewide: Remove birdsong in favour of Tailscale 2025-06-09 16:58:28 +01:00
shell.nix correct flake-compat hash 2024-09-15 16:37:30 +01:00

nixfiles

My NixOS configuration files.

The canonical location for this repository is https://git.unspecified.systems/qenya/nixfiles. If you're viewing it elsewhere, it is a mirror and may not be up-to-date.

Machines

Managed

  • kilgharrah: Custom-built personal desktop; also currently running Jellyfin, Navidrome and Audiobookshelf servers (and an FTP server, for shits and giggles)
  • tohru: Dell Latitude 5300, personal laptop
  • elucredassa: Acer Aspire A315-53, old laptop with a broken keyboard that now sits in a corner being a backup server
  • yevaud: Oracle Cloud free AMD VM, hosts a Forgejo instance and WireGuard server for the other machines in the network
  • orm: Oracle Cloud free AMD VM, hosts an instance of Actual Budget and a PostgreSQL server for other services that need one
  • kalessin: Oracle Cloud free ARM VM, currently idling

Referenced only

Usage

Building

To build locally, run nixos-rebuild switch --flake .#[hostname] as root.

To build the remote machines, run colmena apply. See the colmena documentation for command-line options. Notable options include:

  • --on [hostname]: build a specific machine only
  • --reboot: reboot after building (but note this bug means it may hang even when the reboot completes successfully)

Updating

nix flake update --commit-lock-file