nix-modules/modules/darwin/ at noden · ilak.ch/nix-modules · Tangled

ilak.ch / nix-modules

0

Shared nix modules for my configurations.

0

nix-modules / modules / darwin /

at noden 2 folders 7 files

Ivan Ilak feat(networking): accept IPv6 RAs on the LAN interface (SLAAC) 7w ago

Initial commit

3 months ago

Initial commit

3 months ago

refactor: extract shared darwin/HM modules from consumer flakes Add three reusable modules to remove duplication in nix-config and work-nix-config consumers: - darwinModules.nix-homebrew-base: standardizes nix-homebrew wiring (user from infra.host, mutableTaps=false, autoMigrate=true) with taps as an attrset option, so consumers only supply flake inputs. - homeManagerModules.git-sops-signing: wires infra.git.{signingKeyPath, allowedSignersFile} from a sops-nix secret. Lives at the sibling option infra.gitSopsSigning (not under infra.git) to avoid an infinite recursion through the existing git submodule. - darwinModules.fish-unstable: function module over nixpkgs-unstable that overlays fish to work around the aarch64-darwin code-signature bug in nixos-25.11. All three are gated by mkIf so importing alone is a no-op. Drv-paths in both consumers are unchanged after adoption.

2 months ago

Add Raycast

3 months ago

fish-unstable.nix

refactor: extract shared darwin/HM modules from consumer flakes Add three reusable modules to remove duplication in nix-config and work-nix-config consumers: - darwinModules.nix-homebrew-base: standardizes nix-homebrew wiring (user from infra.host, mutableTaps=false, autoMigrate=true) with taps as an attrset option, so consumers only supply flake inputs. - homeManagerModules.git-sops-signing: wires infra.git.{signingKeyPath, allowedSignersFile} from a sops-nix secret. Lives at the sibling option infra.gitSopsSigning (not under infra.git) to avoid an infinite recursion through the existing git submodule. - darwinModules.fish-unstable: function module over nixpkgs-unstable that overlays fish to work around the aarch64-darwin code-signature bug in nixos-25.11. All three are gated by mkIf so importing alone is a no-op. Drv-paths in both consumers are unchanged after adoption.

2 months ago

Move some programs out of the shared flake

3 months ago

nix-homebrew-base.nix

refactor: extract shared darwin/HM modules from consumer flakes Add three reusable modules to remove duplication in nix-config and work-nix-config consumers: - darwinModules.nix-homebrew-base: standardizes nix-homebrew wiring (user from infra.host, mutableTaps=false, autoMigrate=true) with taps as an attrset option, so consumers only supply flake inputs. - homeManagerModules.git-sops-signing: wires infra.git.{signingKeyPath, allowedSignersFile} from a sops-nix secret. Lives at the sibling option infra.gitSopsSigning (not under infra.git) to avoid an infinite recursion through the existing git submodule. - darwinModules.fish-unstable: function module over nixpkgs-unstable that overlays fish to work around the aarch64-darwin code-signature bug in nixos-25.11. All three are gated by mkIf so importing alone is a no-op. Drv-paths in both consumers are unchanged after adoption.

2 months ago

ci: add tangled workflows for flake-check and lint Add basic CI on main: - flake-check.yml: runs `nix flake check --all-systems` - lint.yml: runs `statix check` and `deadnix --fail` Also fix pre-existing statix W04/W10 findings so lint is clean: - assignment-instead-of-inherit in infra-networking, sshd hardening, infra-monitoring (3x) - empty function pattern `{ ... }:` in darwin/power.nix and nixos/files.nix (the latter from the recent flakeRoot removal)

2 months ago

Add some settings

3 months ago