NixOS Configurations

Flake-based NixOS configurations for zima, cryochamber, liminal, and ruil.

Hosts

Host	Description
zima	Local server (ZFS, impermanence)
cryochamber	zfs.rent server (impermanence)
liminal	Workstation (hardware-specific overlays)
ruil	Digital Ocean droplet (ams3)

After changing a host's config, deploy with:

# Build and activate on the remote host
just deploy ruil root@ruil.hunnur.com

# Or build and activate locally via sudo
just deploy-sudo ruil

There's also a shortcut:

just deploy-ruil

For local hosts, just run:

sudo nixos-rebuild switch --flake .#zima

Secrets are managed with sops-nix using age keys. Each host's secrets live in hosts/<name>/secrets/config.yaml.

Host age keys are derived from SSH host keys:

ssh <host> 'cat /etc/ssh/ssh_host_ed25519_key.pub' | nix run 'nixpkgs#ssh-to-age'

To edit a host's secrets:

sops edit hosts/<name>/secrets/config.yaml