Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/infinisil/system
My system configuration
https://github.com/infinisil/system
dotfiles nix nix-dotfiles nixops nixos nixos-configuration
Last synced: 4 days ago
JSON representation
My system configuration
- Host: GitHub
- URL: https://github.com/infinisil/system
- Owner: infinisil
- License: unlicense
- Created: 2017-04-20T01:38:49.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2024-10-21T02:10:29.000Z (16 days ago)
- Last Synced: 2024-10-22T16:13:04.544Z (14 days ago)
- Topics: dotfiles, nix, nix-dotfiles, nixops, nixos, nixos-configuration
- Language: Nix
- Homepage:
- Size: 10.8 MB
- Stars: 163
- Watchers: 3
- Forks: 11
- Open Issues: 0
-
Metadata Files:
- Readme: README.org
- License: LICENSE
Awesome Lists containing this project
README
* System configuration
This repository contains everything needed to build the NixOS system configuration for all my machines.
** Structure
The ~config~ directory is where the meat is at, it contains almost everything that actually sets configuration. A small selection: keyboard layout, public ssh keys, packages, themes, and much more. The folder contains a Readme with additional information on how its structured.
The ~deploy~ directory contains everything related to (you guessed it) deployment. This includes a script for deployment, the nixops configuration for all machines and a directory that can easily evaluate machines configurations.
The ~deploy/eval~ directory contains another Readme with an explanation of that.
Lastly, the ~external~ directory contains external sources for my config as git submodules (an argument could be made that it should really be in the ~config~ directory though). This currently includes nixpkgs, home-manager, nixops and a private repo.
~external/private~ contains all things I can't share publicly such as the nixops state (it includes the private ssh keys), openvpn keys, and passwords. To make it usable in other parts of my config, it defines a `private` option, which I can use e.g. like ~config.private.passwords.foobar~. Eventually I might share the password nix file generator of that directory, which doesn't really have to be private.