Modular NixOS configuration for my desktop, laptop, and homelab servers.
**NOTE: I'm moving my NixOS configuration to dedicated repos per system, with the goal of removing bloat from unnecessary abstractions. The first of these will be my desktop
This repository contains my personal NixOS configurations. While I welcome others to take inspiration from my setup and I strive to follow best practices, please note:
- No Guarantees: I make no guarantee that these configurations will work on systems other than my own
- Hardware Dependencies: Some configurations have dependencies on my specific hardware
- Use at Your Own Risk: Always review and understand configurations before applying them to your own systems
Feel free to learn from, fork, or adapt any part of this configuration for your own use!
A host can be rebuilt locally with just rebuild-local. Remote hosts can be rebuilt over ssh with just rebuild-remote HOST.
To update a system, run nix flake update followed by the normal rebuild command.
See the justfile for all available commands.
- Desktop - Main desktop workstation with Hyprland
- Laptop - Laptop with Hyprland
- Pandora - Router/firewall with nftables, Blocky DNS, and Kea DHCP
- Installer - Custom NixOS installation ISO
This flake is supported by various utilities to make NixOS development easier:
- Home Manager - Home directory and user profile management
- Denix - Modular multi-host NixOS configuration framework
- SOPS-nix - Secrets management
- Flake-parts - Multi-system flake support
- Git-hooks - Git hooks integration
- nixos-anywhere - Automated NixOS installation
- Disko - Declarative disk partitioning
The homelab is built on a Proxmox VE cluster with four nodes:
- pve-meerkat, pve-colossus, pve-kaiju, pve-kraken - Hypervisor nodes
- Ceph storage - Distributed storage across the cluster (vlan 13)
- Management network - Dedicated network for Proxmox management (vlan 11)
The previous k3s cluster has been decommissioned in preparation for migration to Talos Linux. The new infrastructure will consist of:
- Talos Kubernetes VMs running on Proxmox (vlan 15)
- Multiple clusters for better workload isolation
- Preserved cluster configurations in
k8s/directory ready for deployment
Infrastructure components planned for deployment:
- Traefik - Ingress controller with automatic TLS
- cert-manager - Let's Encrypt certificate management
- Rook-Ceph - Kubernetes storage orchestrator for external Ceph cluster
- MetalLB - Load balancer for bare-metal
For planned features and improvements, please see the GitHub Issues for this repository.