asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity
My nixOS config
78 commits 1 branch 0 tags 259 KiB
  • Nix 100%
Find a file
Sergei Poljanski 23b3b3ff39
 packages: run KUnifiedPush as the UnifiedPush distributor 
another.im (and any UnifiedPush app) is woken by its server for each
message only while a distributor runs on the session bus; GNOME has
none, so the app reported "no UnifiedPush distributor" and missed
messages once quit. KUnifiedPush's distributor needs no Plasma and
uses KDE's ntfy server by default.

Its unit ships in share/systemd/user, which systemd.packages does not
read, so the user service is written out here as the package's own
(26.04), started with the graphical session.

Assisted-by: Claude:opus-5-5
2026-10-16 13:52:56 +04:00
modules packages: run KUnifiedPush as the UnifiedPush distributor 2026-10-16 13:52:56 +04:00
patches desktop: point the mutter touch patch at upstream !5375 2026-10-13 08:24:00 +04:00
secrets sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets 2026-07-14 12:24:21 +04:00
.gitignore sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets 2026-07-14 12:24:21 +04:00
.sops.yaml sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets 2026-07-14 12:24:21 +04:00
configuration.nix sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets 2026-07-14 12:24:21 +04:00
flake.lock flake: bump inputs (nixpkgs 2026-07-11 -> 2026-08-04); anotherim needs sqlcipher, curl 2026-10-03 21:35:54 +04:00
flake.nix lemonade: XDNA2 NPU LLM serving via nix-amd-ai 2026-07-11 22:36:00 +04:00
hardware-configuration.nix ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
README.md readme: add Assisted-by 2026-07-14 12:44:17 +04:00

README.md

NixOS

Assisted-by: Claude (claude-opus-4-5 → claude-opus-4-6 → claude-opus-4-7 → claude-opus-4-8 → claude-fable-5)

Flake-based NixOS configuration for a ThinkPad P14s Gen 6 (AMD), tracking nixos-unstable.

Highlights

  • Secure Boot via lanzaboote
  • Secrets: sops-nix with age — xray config, WireGuard, SSH keys, private routes/hosts; encrypted files stay out of the repo (only .example structure files are tracked), decrypted to /run/secrets at activation
  • Desktop: GNOME on Wayland, AMD GPU
  • Local LLMs: Ollama with ROCm (gfx1151) + Lemonade for XDNA2 NPU serving via nix-amd-ai
  • Networking: Xray VLESS+Reality with sing-box TUN, WireGuard, WWAN modem
  • Gaming: Steam with gamescope, declarative Flatpaks via nix-flatpak
  • Litecoin Core (MWEB): vendored package build, revived after removal from nixpkgs
  • Power: AMD P-State tuning, zram swap ahead of disk swap

Layout

flake.nix              # inputs and host definition
configuration.nix      # entry point, imports modules
modules/               # one module per concern (boot, desktop, ollama, xray, ...)
secrets/               # sops-encrypted (age) secrets, gitignored; .example files document structure

Usage

sudo nixos-rebuild switch --flake /etc/nixos#meow

Fresh install: restore secrets/ and the age key (/var/lib/sops-nix/key.txt) from out-of-band backup first.

TODO

  • Evaluate Home Manager