{"id":30893969,"url":"https://github.com/categoricalcat/nixos","last_synced_at":"2026-06-29T12:31:44.740Z","repository":{"id":306691945,"uuid":"1019845523","full_name":"categoricalcat/nixos","owner":"categoricalcat","description":"cursed nix configs","archived":false,"fork":false,"pushed_at":"2026-06-28T14:17:07.000Z","size":7227,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"develop","last_synced_at":"2026-06-28T16:11:19.387Z","etag":null,"topics":["dns","nix","nix-flake","nixos","nixos-configuration","server"],"latest_commit_sha":null,"homepage":"","language":"Nix","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/categoricalcat.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-07-15T01:10:53.000Z","updated_at":"2026-06-18T22:36:05.000Z","dependencies_parsed_at":"2025-08-26T23:20:04.439Z","dependency_job_id":"a95f522a-8afa-4603-9861-827d18e8446f","html_url":"https://github.com/categoricalcat/nixos","commit_stats":null,"previous_names":["categoricalcat/nixos"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/categoricalcat/nixos","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/categoricalcat%2Fnixos","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/categoricalcat%2Fnixos/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/categoricalcat%2Fnixos/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/categoricalcat%2Fnixos/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/categoricalcat","download_url":"https://codeload.github.com/categoricalcat/nixos/tar.gz/refs/heads/develop","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/categoricalcat%2Fnixos/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34927675,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-29T02:00:05.398Z","response_time":58,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dns","nix","nix-flake","nixos","nixos-configuration","server"],"created_at":"2025-09-08T21:02:00.430Z","updated_at":"2026-06-29T12:31:44.735Z","avatar_url":"https://github.com/categoricalcat.png","language":"Nix","funding_links":[],"categories":[],"sub_categories":[],"readme":"# 伊的flake\n\nmy allegedly pure configs\n\n## the stuff\n\n- **yirukou**: router\n- **yitaishi**: main desktop\n- **yixiaoqing**: laptop\n- **yifuwuqi**: monolith server\n- **yichuang**: wsl\n\n## the imperatives\n\n### secrets and keys\n\nSee [Secrets And Host Keys](docs/src/services/secrets.md) for SOPS setup,\nhost key provisioning, distributed builds key rotation, shared htpasswd,\nthe search service note, and the lockout checklist.\n\n### samba server\n\n```bash\nnix-shell -p samba --run \"sudo smbpasswd -a yi\"\n```\n\n\u003e *see `.sops.example.yaml` and `secrets/.secrets.example.yaml` for the expected formats.*\n\n### FIDO2 Authentication\n\n```bash\nmkdir -p ~/.config/Yubico\nnix-shell -p pam_u2f --run \"pamu2fcfg \u003e ~/.config/Yubico/u2f_keys\"\n```\n\n\u003e *Note, multiple keys: `pamu2fcfg -n \u003e\u003e ~/.config/Yubico/u2f_keys`.*\n\n### yitaishi Lanzaboote / Windows\n\n```bash\n# if Windows uses BitLocker, save the recovery key first\nsudo sbctl create-keys\nsudo nixos-rebuild switch --flake .#yitaishi\n\n# put firmware into Secure Boot Setup Mode, then:\nsudo sbctl enroll-keys --microsoft\n\n# verify\nbootctl status\nsudo sbctl verify\n```\n\n\u003e *Use `--microsoft` to keep the usual Windows and firmware signing chain available.*\n\n### Bitwarden System Auth + Keyring\n\n**Verify prerequisites after `nixos-rebuild switch`:**\n\n```bash\n# polkit policy is registered\npkaction --action-id com.bitwarden.Bitwarden.unlock\n\n# gnome-keyring exposes Secret Service on D-Bus\nbusctl --user list | grep -i secret\n\n# polkit agent is running (niri only; GNOME uses gnome-shell's built-in agent)\npgrep -a polkit\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcategoricalcat%2Fnixos","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcategoricalcat%2Fnixos","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcategoricalcat%2Fnixos/lists"}