2022-11-25 13:34:10 +01:00
![nix ](https://socialify.git.ci/reo101/rix101/image?description=1&font=Source%20Code%20Pro&forks=1&issues=1&logo=https%3A%2F%2Fpablo.tools%2Fnixoscolorful.svg&owner=1&pattern=Circuit%20Board&pulls=1&stargazers=1&theme=Dark )
<!-- <div align="center">
< p >
< a href = "https://github.com/NixOS" >
< img src = "https://img.shields.io/badge/NixOS?style=flat-square&logo=nix" alt = "NixOS" / >
< / a >
< a href = "https://github.com/t184256/nix-on-droid" >
< img src = "https://img.shields.io/badge/nix%2Don%2Ddroid?style=flat-square&logo=nix" alt = "nix-on-droid" / >
< / a >
< a href = "https://github.com/LnL7/nix-darwin" >
< img src = "https://img.shields.io/badge/nix%2Ddarwin?style=flat-square&logo=nix" alt = "nix-darwin" / >
< / a >
< / p >
2022-11-20 16:45:28 +01:00
< p >
< a href = "https://nixos.org/" >
< img src = "https://img.shields.io/badge/Made%20with%20Nix-lightblue.svg?style=for-the-badge&logo=nix" alt = "Nix" / >
< / a >
< a href = "https://github.com/reo101/rix101/blob/main/LICENSE" >
< img src = "https://img.shields.io/github/license/reo101/rix101?style=flat-square&logo=MIT&label=License" alt = "License" / >
< / a >
< a href = "https://github.com/reo101/rix101/pulse" >
< img alt = "Last Commit" src = "https://img.shields.io/github/last-commit/reo101/rix101" / >
< / a >
< / p >
2022-11-25 13:34:10 +01:00
< / div > -->
2022-11-20 16:45:28 +01:00
2022-11-25 13:34:10 +01:00
<!-- ```
2022-11-20 16:45:28 +01:00
___ ___ ___
/ /\ / /\ /__/|
/ /::\ / /:/ | |:|
/ /:/\:\ /__/::\ | |:|
/ /:/~/:/ \__\/\:\ __ |__|:|
/__/:/ /:/___ \ \:\ /__/::::\____
\ \:\/:::::/ \ \:\__ ~\~~\::::/
\ \::/~~~~ \ \:\/\ |~~|:|~~
\ \:\ \__\::/ | |:|
\ \:\ /__/:/ | |:|
\__\/ \__\/ |__|/
2022-11-25 13:34:10 +01:00
``` -->
2022-11-20 16:45:28 +01:00
2024-07-28 01:30:34 +02:00
<!-- TODO: badges? -->
2022-11-25 17:22:53 +01:00
< div align = "center" >
< / div >
2022-11-20 16:45:28 +01:00
---
2023-10-23 08:04:39 +02:00
2024-07-28 01:30:34 +02:00
# Structure
2024-08-02 09:38:37 +02:00
- Everything is built upon [flake-parts ](https://flake.parts/ ), with [flake modules ](./modules/flake/ ) for automatic packages, modules && configurations extraction
- Automatic classic (`callPackage`) and `dream2nix` packages extraction
2024-07-28 01:30:34 +02:00
- Automatic `nixos` , `nix-darwin` , `nix-on-droid` , `home-manager` and `flake` modules extraction
- Automatic `nixos` , `nix-darwin` , `nix-on-droid` and `home-manager` configurations extraction
- Hosts can be found under `./hosts/${config-type}/${system}/${hostname}/...`
- Check [`./modules/flake/configurations.nix` ](./modules/flake/configurations.nix ) for more info on what is extracted from those directories
- Modules can be found under `./modules/${config-type}/...`
- Check [`./modules/flake/modules.nix` ](./modules/flake/modules.nix ) for more info on what is extracted from that directory
2024-07-28 12:06:12 +02:00
- Packages can be found under `./pkgs/...`
- Overlays can be found under `./overlays/...`
- Shells can be found under `./shells/...`
- Default one puts a recent `nix` together with some other useful tools for working with the repo (`deploy-rs`, `rage` , `agenix-rekey` , etc.), see [`./shells/default/default.nix` ](./shells/default/default.nix ) for more info
2024-07-28 01:30:34 +02:00
# Topology
You can see the overall topology of the hosts by running
2023-11-17 14:59:32 +01:00
2024-07-28 01:41:08 +02:00
```sh
2024-07-28 01:30:34 +02:00
nix build .#topology
2023-11-17 14:59:32 +01:00
```
2024-07-28 01:30:34 +02:00
And opening the resulting `./result/main.svg` and `./result/network.svg`
---
# Secrets
Secrets are managed by [`agenix` ](https://github.com/ryantm/agenix ) and [`agenix-rekey` ](https://github.com/oddlama/agenix-rekey )
> [!NOTE]
> Secrets are defined by the hosts themselves, `agenix-rekey` *just* collects what secrets are referenced by them and lets you generate, edit and rekey them
2023-11-17 14:59:32 +01:00
2024-07-28 01:41:08 +02:00
```sh
2024-07-28 01:30:34 +02:00
# To put `rage`, `agenix-rekey` and friends in `$PATH`
nix develop
2023-11-17 14:59:32 +01:00
```
## Edit secret
2024-07-28 01:41:08 +02:00
```sh
2024-07-28 01:30:34 +02:00
# Select from `fzf` menu
agenix edit
2023-11-17 14:59:32 +01:00
```
## Rekey all secrets
2024-07-28 01:41:08 +02:00
```sh
2024-07-28 01:30:34 +02:00
agenix rekey
```
## Generate missing keys (with the defined `generators`)
2024-07-28 01:41:08 +02:00
```sh
2024-07-28 01:30:34 +02:00
agenix generate
2023-11-17 14:59:32 +01:00
```
2024-07-28 01:30:34 +02:00
---
# Setups
## NixOS setup
2023-10-23 08:04:39 +02:00
2024-07-28 01:41:08 +02:00
```sh
2023-10-23 08:04:39 +02:00
# Initial setup
2024-07-28 01:41:08 +02:00
nix run nixpkgs#nixos-anywhere -- --flake ".#${HOSTNAME}" --build-on-remote --ssh-port 22 "root@${HOSTNAME}" --no-reboot
2023-10-23 08:04:39 +02:00
# Deploy
2024-07-28 01:41:08 +02:00
deploy ".#${HOSTNAME}" --skip-checks
2023-10-23 08:04:39 +02:00
```
2024-07-28 01:30:34 +02:00
## MacOS / Darwin (silicon) setup
2023-10-23 08:04:39 +02:00
2024-07-28 01:41:08 +02:00
```sh
2023-10-23 08:04:39 +02:00
# Setup system tools
softwareupdate --install-rosetta --agree-to-license
sudo xcodebuild -license
# Install nix
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install
# Apply configuration
git clone https://www.github.com/reo101/rix101 ~/.config/rix101
cd ~/.config/rix101
nix build ".#darwinConfigurations.${HOSTNAME}.system"
./result/sw/bin/darwin-rebuild switch --flake .
# System setup for `yabai` (in system recovery)
2024-07-28 01:30:34 +02:00
# NOTE: <https://support.apple.com/guide/mac-help/macos-recovery-a-mac-apple-silicon-mchl82829c17/mac>
2023-10-23 08:04:39 +02:00
csrutil enable --without fs --without debug --without nvram
```
2024-07-28 01:30:34 +02:00
---
# Credits
2024-07-28 12:06:12 +02:00
- [`Misterio77` ](https://github.com/Misterio77 ) for his amazing [`nix-starter-configs` ](https://github.com/Misterio77/nix-starter-configs ), on which this was based originally
2024-07-28 01:30:34 +02:00
- [`disko` ](https://github.com/nix-community/disko ) for making disk partioning a breeze
- [`oddlama` ](https://github.com/oddlama ) for creating the amazing [`agenix-rekey` ](https://github.com/oddlama/agenix-rekey ) and [`nix-topology` ](https://github.com/oddlama/nix-topology ) projects