land 🏠

My homelab and dotfiles managed with Nix. This repository contains declarative configurations for my machines.

Overview

This repository uses Nix to manage:

• macOS machines (via nix-darwin)
• NixOS systems
• Home Manager configurations
• WSL 2 instances

Usage

1. Install Nix following the official instructions

2. Apply configuration:

   • For macOS:

     nix run nix-darwin --experimental-features 'nix-command flakes' -- switch --refresh --flake github:0x77dev/land#<hostname>

   • For NixOS:

     nixos-rebuild switch --refresh --flake github:0x77dev/land#<hostname>

   • For installing NixOS on a new machine:

     HOSTNAME=...
     mkdir -p systems/nixos/$HOSTNAME
     
     curl https://raw.githubusercontent.com/nix-community/disko/master/example/hybrid.nix -o systems/nixos/$HOSTNAME/disko-config.nix
     # edit disko-config.nix
     # download disko-config.nix to the target machine at /tmp
     sudo nix \
      --experimental-features "nix-command flakes" \
      run github:nix-community/disko -- \
      --mode disko /tmp/disko-config.nix
     
     sudo nixos-install --root /mnt --flake 'github:0x77dev/land#<hostname>'

   • For installing NixOS on a new machine remotely:

     # Boot into the NixOS minimal ISO or any Linux distribution with kexec support, ensure passwordless sudo user and ssh.
     # NixOS minimal is the easiest to use (ssh is enabled by default, passwordless sudo user is created): boot, run `sudo passwd nixos`, and then execute the following command on another machine:
     nixos-anywhere --flake 'github:0x77dev/land#<hostname>' <username>@<hostname>

   • Applying NixOS configuration on a machine remotely:

     nixos-rebuild \
        --flake .#tomato \
        --target-host mykhailo@tomato \
        --build-host mykhailo@tomato \
        --use-remote-sudo \
        switch --accept-flake-config

   • For home-manager (if not defined in NixOS or nix-darwin):

     nix run home-manager --experimental-features 'nix-command flakes' -- switch --refresh --experimental-features 'nix-command flakes' --flake github:0x77dev/land#<username>@<hostname> -b backup

   • For WSL:

     # Build the tarball
     sudo nix run --experimental-features 'nix-command flakes' github:0x77dev/land#nixosConfigurations.wsl.config.system.build.tarballBuilder

     # Import the tarball
     New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\WSL-Land"
     wsl.exe --import Land "$env:USERPROFILE\WSL-Land" nixos-wsl.tar.gz --version 2

     # Run the WSL instance
     wsl.exe -d Land
     # Optional: Set NixOS as the default WSL distribution
     wsl.exe -s Land

     # Post-install
     wsl.exe -d Land -u mykhailo -e "sudo nix-channel --update"

     # Apply updates
     wsl.exe -d Land -u root -e "nixos-rebuild switch --refresh --flake github:0x77dev/land#wsl"

Structure

• modules/ - Shared configuration modules
• modules/home/ - Home Manager configuration modules
• systems/ - Machine-specific configurations
• flake.nix - Flake
• .envrc - Direnv configuration

Forking

If you want to use this repository as a starting point for your own homelab, you can do so by forking it and customizing it to your needs.

You can start by adding your own machines to the flake.nix file, and then customize the modules/ and systems/ directories to your liking.

Cheat sheet

sops

• Getting target machine public key

  ssh-keyscan tomato | ssh-to-age