Files
Bundle OKF 0.1 · 10 conceitos · heph2/infra
Open source Repository Open in the app JSON README (API)
About
# Files
- [Temporary run artifact](_skeleton.md) - This file should be removed after wiki generation.
- [Packages, development shell, and deployment workflow](packages-and-developer-workflow.md) - Developer shell tooling, Just build and deployment targets, custom packages, and narrow validation commands for this infrastructure flake.
- [Infrastructure flake quickstart](quickstart.md) - Navigate and safely change the NixOS, nix-darwin, Home Manager, Terraform, and operational services managed by this repository.
# Directories
- [architecture](architecture/)
- [hosts](hosts/)
- [infrastructure](infrastructure/)
- [networking](networking/)
- [security](security/)
- [services](services/)
- [workstations](workstations/)
Details
- Kind
- OKF bundles
- Topic
- Cloud & DevOps
- Publisher
- heph2
- Origin
- okf_github
- Category
- dados
- Version
- 0.1
- Last push
- 2026-09-07T17:17:24Z
- Repository state
- ativo
- Language
- Nix
- Added
- 2026-09-08 16:05:40
- Updated
- 2026-09-08 16:05:40
- Origin id
heph2/infra:openwiki/index.md
README
# NixOs Configuration This repository contains NixOS configurations for my machines, managed using Nix Flakes. It is structured to manage multiple machines and user configurations. ## Structure - `flake.nix`: Flake entrypoint - `hosts`: NixOs configurations for each machine - `modules`: Reausable specific modules - `terraform`: Terraform code for cloud based machine setup - `secrets`: Sops-nix and age directory - `pkgs`: Custom packages and scripts Shared NixOS, nix-darwin, and Home Manager modules are registered by class under `infra.modules` and composed by each host declaration. Home Manager aspects live in `modules/home/`; host-specific settings remain in `hosts/<name>/home.nix`. ## Hosts - `Fafnir`: Router - `Freya`: Desktop - `Hermes`: Hetzner VPS (Currently used as a mail server) - `Timballo`: Thinkpad t480 - `Tyr`: Intel Nuc (Currently not used) - `Ushi`: WSL Experiment (Currently not used) - `Zima`: Zimaboard - `Sauron`: NAS - `Aron`: Macbook Pro - `Fenrir`: MacBook Air M1 (Asahi Linux) ## Usage You can easily drop inside a shell with all the stuff needed using `nix develop` or `direnv allow` if using `direnv`. From there you just need the `age` private key and `ssh` keys, and you can deploy directly using: ``` just deploy <name_of_host` ``` Or using: ``` just deploy-remote <name_of_host` ``` For Darwin: ``` just deploy-darwin ``` This will build the closure using `--build-host` and `--target-host` for avoiding cross-compiling issues. ## Operations - [Repository usage](docs/repository-usage.md) - [RB5009 WireGuard over IPv6](docs/rb5009-wireguard-ipv6.md) - [OpenObserve and telemetry roadmap](docs/openobserve-roadmap.md)