beatzaplenty/nixos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updated documentation
Check NixOS configurations / eval-hosts (push) Failing after 30m36s
Details

Browse Source
This commit is contained in:
WayneBennett666
2026-06-01 18:22:05 +10:00
parent bf0445ebd6
commit 2f985536c4
7 changed files with 144 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AGENTS.md
+20 -6
View File
@@ -2,7 +2,8 @@
## Repo purpose
This repository contains flake-based NixOS configurations for Wayne’s LAN servers and workstation.
This repository contains flake-based NixOS configurations for Wayne's LAN
servers and workstation.
The flake currently exposes these NixOS configurations:
@@ -12,16 +13,22 @@ The flake currently exposes these NixOS configurations:
- `server`
- `nix-cache`
- `nix-minimal`
- `pxe-boot`
Do not deploy, switch, reboot, repartition, format disks, or run destructive install commands from this repository unless explicitly asked.
Do not deploy, switch, reboot, repartition, format disks, or run destructive
install commands from this repository unless explicitly asked.
## Safety rules
- Never run `nixos-rebuild switch`, `boot`, `test`, `nixos-install`, `parted`, `mkfs`, `mkswap`, `swapon`, `mount`, or destructive disk commands in Codex.
- Validation work should be limited to evaluation, linting, formatting checks, and `nix build --dry-run --no-link`.
- Do not add secrets, tokens, private keys, password hashes, or live credentials to the repo.
- Never run `nixos-rebuild switch`, `boot`, `test`, `nixos-install`, `parted`,
`mkfs`, `mkswap`, `swapon`, `mount`, or destructive disk commands in Codex.
- Validation work should be limited to evaluation, linting, formatting checks,
and `nix build --dry-run --no-link`.
- Do not add secrets, tokens, private keys, password hashes, or live credentials
to the repo.
- Treat `flake.nix`, Home Manager config, and Nix config files as public.
- If you find committed tokens or hashes, flag them immediately and recommend rotation/removal.
- If you find committed tokens or hashes, flag them immediately and recommend
rotation/removal.
## Expected commands
@@ -31,3 +38,10 @@ Use these commands when validating changes:
bash scripts/codex-setup.sh
bash scripts/codex-maintenance.sh
bash scripts/codex-maintenance.sh dry-run
```
Host evaluation is safe when limited to drvPath checks:
```bash
nix eval .#nixosConfigurations.<host>.config.system.build.toplevel.drvPath --raw
```