BranchesTags

Repository files navigation

NixOS + Home Manager Flake Configuration

A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.

Quick Start

# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update

Architecture

Flake Structure

├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines

sietch (Desktop)

  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:
    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support

jacurutu (Laptop)

  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:
    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support

Key Features

Shared Configuration

  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications

Custom Packages

All custom packages are integrated as flake inputs:

  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks

Secrets Management

  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations

Development Workflow

  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)

File Organization

Core Files

  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services

Machine-Specific

  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules

Modules

  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files

Adding New Machines

  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix

Updating Dependencies

# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run

Troubleshooting

Common Issues

  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files

Debugging

# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations

Security Notes

  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access

About

linux config files

Resources

Readme
AGPL-3.0 license
Activity

Stars

2 stars

Watchers

1 watching

Forks

0 forks
Report repository

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
BranchesTags
Repository files navigation
NixOS + Home Manager Flake Configuration
A modular, flake-based NixOS configuration with Home Manager integration, supporting multiple machines with shared and machine-specific settings.
Quick Start
# Deploy to specific machine
sudo nixos-rebuild switch --flake .#sietch
sudo nixos-rebuild switch --flake .#jacurutu# Check configuration
nix flake check --no-build
# Update inputs
nix flake update
Architecture
Flake Structure
├── flake.nix # Main flake definition
├── flake.lock # Pinned input versions
├── configuration.nix # Shared system configuration
├── secrets.nix # Agenix secrets configuration
├── user.nix # User configuration with Home Manager
├── bin/ # Custom scripts and utilities
├── config/ # Application configurations
│ ├── nvim/ # Neovim configuration
│ ├── claude/ # Claude Code settings
│ ├── vscode/ # VSCode configuration
│ └── ... # Other app configs
├── home/ # Home Manager configuration
│ ├── default.nix # Main HM config (packages, programs, desktop)
│ ├── shell.nix # Shell environment and dotfiles
│ ├── services.nix # User systemd services
│ ├── completions/ # Custom shell completions
│ └── desktop/ # Desktop environment configs
│ ├── x11/ # X11 desktop (i3, polybar, rofi, dunst, picom)
│ └── wayland/ # Wayland desktop (future)
├── modules/ # Reusable modules
│ ├── home/ # Home Manager modules
│ │ ├── fonts.nix # Font configuration
│ │ ├── ghostty.nix # Terminal emulator
│ │ ├── gtk.nix # GTK theme configuration
│ │ ├── pwas.nix # Progressive web apps
│ │ └── zen/ # Zen browser configuration
│ └── nixos/ # NixOS modules
│ ├── deskotp-x11.nix # X11 and desktop services
│ ├── desktop-wayland.nix # Wayland desktop services
│ ├── nvidia.nix # NVIDIA/CUDA setup
│ ├── mullvad-vpn.nix # VPN configuration
│ ├── virt-manager.nix # Virtualization
│ └── xbox-controller.nix # Gaming controller support
├── machines/ # Machine-specific configurations
│ ├── sietch/
│ │ ├── default.nix # Desktop system config
│ │ └── hardware-configuration.nix
│ └── jacurutu/
│ ├── default.nix # Framework laptop config
│ └── hardware-configuration.nix
├── packages/ # Custom packages
│ ├── cursor.nix # Cursor IDE
├── wallpapers/ # Desktop wallpapers
├── scripts/ # Utility scripts
│ ├── bootstrap.sh # Legacy dotfile symlinks
│ └── partitioning.sh # Disk partitioning helper
├── selfhost/ # Docker services
│ └── compose.yml # Open-WebUI, Jellyfin, etc.
└── secrets/ # Encrypted secrets (agenix)
└── env.age # Environment variables

Machines
sietch (Desktop)
  • Role: Primary desktop workstation
  • Hardware: NVIDIA GPU with CUDA support
  • Features:

    • Gaming setup (Steam, controller support)
    • NVIDIA drivers and container toolkit
    • OpenRGB for RGB control
    • SSH server enabled
    • Development environment
    • Docker with GPU support
jacurutu (Laptop)
  • Role: Portable development machine
  • Hardware: Framework laptop
  • Features:

    • Fingerprint authentication
    • Power management optimizations
    • Portable development setup
    • Framework-specific hardware support
Key Features
Shared Configuration
  • Home Manager: User-level package and configuration management
  • i3 Window Manager: Tiling window manager with custom keybindings (via Home Manager)
  • Desktop Applications: Fully declarative configuration for rofi, dunst, picom, polybar, and GTK themes
  • Development Environment: Comprehensive LSP setup, languages, and tools (via Home Manager)
  • Audio: PipeWire with PulseAudio compatibility
  • Networking: NetworkManager with VPN support
  • Security: Tailscale VPN, encrypted secrets via agenix
  • Themes: Catppuccin Mocha color scheme integrated across applications
Custom Packages
All custom packages are integrated as flake inputs:
  • atlas: CLI for bitbucket and confluence
  • claude-bar: System tray popup for tracking usage across Claude COde, and Codex.
  • dictator: Voice dictation tool
  • dump: Data dump utility
  • raindrop: CLI for managing raindrop bookmarks
Secrets Management
  • Encryption: agenix for secret management
  • SSH Keys: Machine-specific public keys for decryption
  • Environment Variables: Encrypted API keys and configurations
Development Workflow
  1. Make Changes: Edit configuration files (NixOS system config or Home Manager user config)
  2. Test: nix flake check --no-build
  3. Deploy: sudo nixos-rebuild switch --flake .#<machine> (includes Home Manager)
  4. Rollback: sudo nixos-rebuild switch --rollback (if needed)
  5. Home Manager only: home-manager switch --flake .#<user>@<machine> (if needed)
File Organization
Core Files
  • flake.nix: Defines inputs, outputs, and system configurations
  • configuration.nix: System-wide settings (boot, networking, services)
  • user.nix: User account configuration with Home Manager integration
  • home/default.nix: Main Home Manager configuration (packages, programs, desktop)
  • home/shell.nix: Shell environment and dotfiles
  • home/services.nix: User systemd services
Machine-Specific
  • machines/<hostname>/default.nix: Machine-specific configuration
  • machines/<hostname>/*.nix: Hardware-specific modules
Modules
  • modules/nixos/: Shared NixOS modules (X11, Wayland, NVIDIA, VPN, etc.)
  • modules/home/: Reusable Home Manager modules (fonts, terminal, themes)
  • home/: User environment and configuration (Home Manager)
  • home/desktop/: Desktop environment setup (x11, wayland) managed declaratively
  • secrets/: Encrypted configuration files
Adding New Machines
  1. Create machines/<hostname>/default.nix
  2. Add hardware configuration
  3. Include machine-specific modules from modules/nixos/
  4. Add to flake.nix nixosConfigurations using makeSystem
  5. Update secrets.nix with new SSH key
  6. Configure Home Manager integration in user.nix
Updating Dependencies
# Update all inputs
nix flake update
# Update specific input
nix flake update <input-name># Check what will be updated
nix flake update --dry-run
Troubleshooting
Common Issues
  • Secrets not decrypting: Check SSH key matches secrets.nix
  • Build failures: Run nix flake check for syntax errors
  • Module not found: Verify import paths in configuration files
Debugging
# Show detailed evaluation trace
nix flake check --show-trace
# Build without switching
sudo nixos-rebuild build --flake .#<machine># Check system status
nixos-rebuild list-generations
Security Notes
  • Secrets are encrypted with agenix and machine-specific SSH keys
  • No plaintext secrets in the repository
  • SSH keys are managed per-machine for isolation
  • Tailscale provides secure remote access
About
linux config files
Resources
Readme
AGPL-3.0 license
Activity
Stars
2 stars
Watchers
1 watching
Forks
0 forks
Report repository
Releases
Packages
Used by
Contributors
Languages