nixconfig

Personal NixOS and Home Manager configurations, managed with Flake Parts and import-tree.

🚀 Overview

This repository contains my personal system configurations for various machines. It is structured to be modular and easily extensible, leveraging modern Nix features.

• System: NixOS (Unstable)
• Configuration Framework: flake-parts
• User Management: Home Manager
• Secret Management: sops-nix
• Styling: stylix (Theming across the entire system)

Important

The flake.nix file is auto-generated using flake-file. Use nix run .#write-flake to regenerate it if you modify the structure.

🖥️ Hosts

Host	Purpose	Theme
nixgroot	Main Desktop (Gaming, NVIDIA, Passthrough)	Everforest
labnix	Work/Lab Machine	Catppuccin Frappe
nixpad	ThinkPad T14 Gen3 (AMD) Laptop, LUKS + BTRFS, niri + noctalia	Everforest

nixpad — ThinkPad T14 Gen3 (AMD)

The nixpad host uses LUKS + BTRFS with passphrase-only unlock — the LUKS passphrase is typed in the initrd at every boot.

TPM2-based auto-unlock is available as an optional convenience:

sudo systemd-cryptenroll --tpm2-device=auto /dev/nvme0n1p2

Only pair it with Secure Boot (e.g. via lanzaboote): without it, the TPM binds to a boot state that cannot detect initrd tampering, so passphrase-only unlock is the safer default. The fingerprint reader remains handy for sudo, Polkit prompts, and screen unlock (fprintd-enroll).

📂 Project Structure

• assets/: Wallpapers, icons, and avatars.
• modules/:
  • defaults/: Default settings for NixOS, Darwin, and Home Manager.
  • features/: Modular system and home-manager features (e.g., browsers, gaming, development).
  • hosts/: Machine-specific configurations.
  • settings/: Global settings (nix, secrets, stylix, system).
  • users/: User-specific configurations.

🛠️ Features

The configuration is broken down into modular features that can be easily enabled:

• Desktop Environments: Niri, Dank Material Shell.
• Development: AI tools, Devenv, Git, LSP support, Python, R.
• Gaming: Steam and gaming-related tweaks.
• Media: Spicetify, generic media tools.
• Cloud/Sync: Syncthing, Rclone, Tailscale.
• Security: Bitwarden, Sops.
• System: Custom networking, boot, audio, and hardware (NVIDIA) configurations.

⚙️ Installation & Usage

Rebuilding the system

To apply the configuration for a specific host:

# Example for nixgroot
sudo nixos-rebuild switch --flake .#nixgroot
# OR use the nh update script in the config to perform nh os switch .
update

Updating

nix flake update
update

Formatting

This project uses nixfmt (via treefmt if configured, otherwise manual).

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.