https://giovanninicosia.dev/tags/nix-flakes/ Recent content in Nix-Flakes on Giovanni Nicosia Hugo en Wed, 25 Oct 2023 00:00:00 +0200 https://giovanninicosia.dev/projects/nix-config/ Wed, 25 Oct 2023 00:00:00 +0200 https://giovanninicosia.dev/projects/nix-config/ <p>This repository is a <strong>Nix Flake</strong> that manages the complete, declarative configuration of all my personal machines — development workstations and a homelab server — from a single, version-controlled source of truth. Each host is defined as a NixOS configuration module that composes shared profiles (desktop environment, development tools, security hardening) with host-specific settings, making it straightforward to keep multiple machines consistent or diverge them intentionally.</p> <p>The homelab server runs a set of self-hosted services deployed as <strong>NixOS containers</strong>, isolated from each other and from the host. Networking between containers and to the outside is managed through a <strong>VPN</strong> (WireGuard), with firewall rules derived directly from the NixOS configuration. Secrets such as API keys, database passwords, and VPN private keys are encrypted at rest using <strong>SOPS</strong> (Secrets OPerationS) and decrypted at activation time, so no plaintext secrets ever land in the Nix store.</p>