AGENTS.md

Repo purpose

This repository contains flake-based NixOS configurations for Wayne's LAN servers and workstation.

The flake currently exposes these NixOS configurations:

Do not deploy, switch, reboot, repartition, format disks, or run destructive install commands from this repository unless explicitly asked.

Never run nixos-rebuild switch, boot, test, nixos-install, parted, mkfs, mkswap, swapon, mount, or destructive disk commands in Codex.
Validation work should be limited to evaluation, linting, formatting checks, and nix build --dry-run --no-link.
Do not add secrets, tokens, private keys, password hashes, or live credentials to the repo.
Treat flake.nix, Home Manager config, and Nix config files as public.
If you find committed tokens or hashes, flag them immediately and recommend rotation/removal.

Use these commands when validating changes:

bash scripts/codex-setup.sh
bash scripts/codex-maintenance.sh
bash scripts/codex-maintenance.sh dry-run

Host evaluation is safe when limited to drvPath checks:

nix eval .#nixosConfigurations.<host>.config.system.build.toplevel.drvPath --raw