My declarative, reproducible system built using Lix.
If you set up a new machine you should probably generate a new SSH key pair. Put your keys in /home/thomas/.ssh/.
Put your age keys here:
vim /home/thomas/.config/sops/age/keys.txtTo rebuild the system:
nixos-rebuild switch --flake . --use-remote-sudoTo rebuild a remote system locally, and deploy it:
nixos-rebuild switch --flake .#coprin --target-host thomas@192.168.1.30 --use-remote-sudoCopy the peripheral firmware files off the EFI system partition (e.g. on the installation ISO mkdir -p /mnt/etc/nixos/firmware && cp /mnt/boot/asahi/{all_firmware.tar.gz,kernelcache*} /mnt/etc/nixos/firmware). Then, once a NixOS is installed, copy these firmware files to the current configuration cp /mnt/etc/nixos/firmware* <current_config>/system/asahi-firmware.
Some packages require manual configuration.
If you imported age keys, just login to retrieve your shell history:
atuin login
atuin syncJust open Obsidian, login and sync everything including community plugins and settings (Active community plugin list and Installed community plugins options). Wait for the end of the synchronization, and restart the app.
Connect your machine to your Tailscale network and authenticate in your browser:
sudo tailscale upIn Dolphin (or somewhere else), use smb://user@ip to connect to a remote SMB share.
sudo -H nix profile install \
--profile /nix/var/nix/profiles/default \
--experimental-features "nix-command flakes" \
--accept-flake-config \
'github:flox/flox'
Optimize the Nix store by hard linking duplicate binaries. This shouldn't be needed with my current dotfiles though, as optimizations are performed automatically at build time.
nix-store --optimiseThe Nix store accumulates entries which are no longer useful. They can be deleted:
nix-store --gcDelete all generations older than a specific period (e.g. 30 days):
nix-collect-garbage --delete-older-than 30dBugs:
- (zotero) Zotero is not available yet on aarch64 platforms.
- (localsend) LocalSend can't receive files when dns0 is enabled.
- (librewolf)
privacy.resistFingerprinting = trueprevents media upload and Leboncoin login from working.
These would be nice to have.
- I would like to install the Ophirofox extension, which is not available on the Mozilla store.
These are not fully integrated yet.
- SDDM doesn't offer a keyboard layout selection, which is very annoying for non-US keyboard users. SDDM should be incubated into Plasma at some point.
- Pinned favorites in kickoff menu is not supported by
plasma-manageryet.
- Introduction to Nix and NixOS by Wil T
- I got some inspiration from geraldwuhoo
- NixOS Secrets Management by EmergentMind
- Flakes + Home Manager Multiuser/Multihost Configuration by Chris McDonough
- NixOS on Apple Silicon by sef