Nix

Hello 👋,

This repository is my approach to NixOS.

After many years of using Linux, I grew tired of configuring one distribution after another. I started collecting dotfiles and scripts to automate setup, even building an installer, but there was always configuration happening around them. The systems worked, yet they slowly drifted away from what was written down. I wanted "the last Linux configuration of my life": a reproducible system that consistently delivers the state it declares.

NixOS offered a way to work towards that idea. I began learning the language and the ecosystem, then turned that knowledge into this configuration for my machines. What started as traditional dotfiles has grown into a complete operating system configuration: opinionated where it should be, flexible where it can be, and still evolving as I learn more and my needs change. It is not a distribution or a universal answer to NixOS, just an honest record of that ongoing process.

Thanks for taking the time to look at my repository. — Sam

Here is a preview of what the configuration looks like today:

Show KDE Plasma Preview

The wallpaper shown in the preview can be purchased from kram.store.

What is here

The configuration is split into reusable modules and host-specific choices:

flake.nix                 # Entry point, host discovery, outputs, and checks
hosts/                    # Machine-specific configuration
modules/system/           # Hardware, boot, networking, storage, and security
modules/home-manager/     # Desktop, programs, theming, and user configuration
modules/lib/              # Reusable module helpers
modules/packages/         # Packages maintained by this configuration
backgrounds/              # Encrypted personal background archive
sops/                     # Encrypted secrets
docs/                     # Installation, configuration, and operational guides

The flake discovers local hosts automatically from hosts/. Shared behavior lives in modules; a host mostly describes its hardware and the choices that make it different.

Getting started

• Fresh installation: docs/INSTALL.md
• Use this as a base: docs/QUICKSTART.md
• Configuration reference: docs/CONFIG.md
• Security model: docs/SECURITY.md

Making it yours

Host configuration is organized by feature groups. Keep only the values that are different for the machine:

features = {
  hardware = {
    formFactor = "laptop";
    cpu = "intel";
    gpu = "intel";
  };

  desktop = {
    wm = "kde";
    fileManager = "default";
    browser = {
      type = "librewolf";
      newTabPage = "https://dash.example.com";
    };
  };

  encryption = {
    unlockMethod = "tpm2";
  };

  gaming.enable = false;
  virtualisation.vm.enable = false;
};

Most defaults are useful for a normal desktop or laptop. The full set of overrides, defaults, and examples is in docs/CONFIG.md.

Using as a flake input

The flake exports lib.mkHost and lib.mkDisko for use from another repository. The current interface and a complete example are documented in docs/QUICKSTART.md.