Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

beatzaplentyandClaude Sonnet 5 0b090cab07

Check NixOS configurations / eval-hosts (push) Successful in 34m44s

Details

Sync host lists with flake.nix and add CLAUDE.md

Remove the nonexistent kuma host and add the missing linode-minimal
host across README, AGENTS.md, docs, and CI eval workflows so they
match flake.nix's nixosConfigurations. Also add CLAUDE.md with
architecture/safety guidance for future Claude Code sessions.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-19 09:48:05 +10:00

2.4 KiB

Raw Blame History

NixOS LAN Configurations

Flake-based NixOS configuration repository for Wayne's LAN servers and workstation.

Hosts

This flake currently defines:

Host	Purpose
`nixos`	Main NixOS workstation / Cinnamon desktop
`docker`	Docker host for the main container stack
`server`	Storage, NFS, backup, and monitoring exporter host
`nix-cache`	Local Nix binary cache and remote builder
`nix-minimal`	Minimal NixOS host profile with SSHFS tooling
`pxe-boot`	HTTP/iPXE boot asset host
`linode-minimal`	Minimal NixOS host profile for Linode VPS instances

List hosts with:

nix eval --json .#nixosConfigurations --apply builtins.attrNames | jq -r '.[]'

Layout

Path	Purpose
`flake.nix`	Flake inputs and `nixosConfigurations` outputs
`hosts/<host>/configuration.nix`	Host-specific NixOS configuration
`hosts/nixos/home.nix`	Workstation-specific Home Manager config
`common/`	Shared NixOS, Home Manager, aliases, and hardware config
`modules/nix/`	Binary cache and remote builder client/server modules
`docs/`	Operational notes for cache, builders, lock updates, and boot services
`scripts/`	Codex setup and validation helpers

Validation

Safe validation commands for Codex and local review:

bash scripts/codex-setup.sh
bash scripts/codex-maintenance.sh dry-run
bash scripts/codex-maintenance.sh

For individual host evaluation:

nix eval .#nixosConfigurations.<host>.config.system.build.toplevel.drvPath --raw

Use nix build --dry-run --no-link when build planning is needed. Do not run deployment, install, disk formatting, mount, or reboot commands from automated review sessions.

Operations

Host rebuilds should consume the committed flake.lock.
Routine dependency updates should happen through the flake lock automation described in docs/flake-lock-automation.md.
nix-cache serves substitutes over HTTP and can act as a remote builder for client hosts.
pxe-boot serves iPXE boot files over HTTP from /srv/pxe.

Security Notes

Do not commit tokens, private keys, live credentials, or new password hashes. This repository currently contains committed password hashes in shared NixOS configuration; rotate those passwords and move hashes into host-local secret management before treating the repository as public or widely shared.

2.4 KiB Raw Blame History