land 🏠

My homelab and dotfiles managed with Nix. This repository contains declarative configurations for my machines.

Overview

This repository uses Nix to manage:

• macOS machines (via nix-darwin)
• NixOS systems
• Home Manager configurations
• WSL 2 instances
• Containers (Proxmox LXC)

Usage

1. Install Nix following the official instructions

2. Apply configuration:

   • For macOS:

     nix run nix-darwin --experimental-features 'nix-command flakes' -- switch --refresh --flake github:0x77dev/land#<hostname>

   • For NixOS:

     nixos-rebuild switch --refresh --flake github:0x77dev/land#<hostname>

   • For installing NixOS on a new machine:

     HOSTNAME=...
     mkdir -p systems/nixos/$HOSTNAME
     
     curl https://raw.githubusercontent.com/nix-community/disko/master/example/hybrid.nix -o systems/nixos/$HOSTNAME/disko-config.nix
     # edit disko-config.nix
     # download disko-config.nix to the target machine at /tmp
     sudo nix \
      --experimental-features "nix-command flakes" \
      run github:nix-community/disko -- \
      --mode disko /tmp/disko-config.nix
     
     sudo nixos-install --root /mnt --flake 'github:0x77dev/land#<hostname>'

   • For installing NixOS on a new machine remotely:

     # Boot into the NixOS minimal ISO or any Linux distribution with kexec support, ensure passwordless sudo user and ssh.
     # NixOS minimal is the easiest to use (ssh is enabled by default, passwordless sudo user is created): boot, run `sudo passwd nixos`, and then execute the following command on another machine:
     nixos-anywhere --flake 'github:0x77dev/land#<hostname>' <username>@<hostname>

   • Applying NixOS configuration on a machine remotely:

     nixos-rebuild \
        --flake .#tomato \
        --target-host mykhailo@tomato \
        --build-host mykhailo@tomato \
        --use-remote-sudo \
        switch --accept-flake-config

   • For home-manager (if not defined in NixOS or nix-darwin):

     nix run home-manager --experimental-features 'nix-command flakes' -- switch --refresh --experimental-features 'nix-command flakes' --flake github:0x77dev/land#<username>@<hostname> -b backup

   • For WSL:

     # Build the tarball
     sudo nix run --experimental-features 'nix-command flakes' github:0x77dev/land#nixosConfigurations.muscleWSL.config.system.build.tarballBuilder

     # Import the tarball
     New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\WSL-Land"
     wsl.exe --import Land "$env:USERPROFILE\WSL-Land" nixos-wsl.tar.gz --version 2

     # Run the WSL instance
     wsl.exe -d Land
     # Optional: Set NixOS as the default WSL distribution
     wsl.exe -s Land

     # Post-install
     wsl.exe -d Land -u mykhailo -e "sudo nix-channel --update"

     # Apply updates
     wsl.exe -d Land -u root -e "nixos-rebuild switch --refresh --flake github:0x77dev/land#muscleWSL"

   • For nix-rendezvous container:

     # Build the Proxmox LXC container image
     nix build .#nixosConfigurations.nix-rendezvous.config.formats.proxmox-lxc

     # Copy the tarball to your Proxmox host
     scp result root@proxmox:/var/lib/vz/template/cache/nix-rendezvous.tar.xz

     # On Proxmox, create a new container using the tarball
     # Either use the web interface or the command line:
     pct create 228 /var/lib/vz/template/cache/nix-rendezvous.tar.xz \
       --hostname nix-rendezvous \
       --cores 4 \
       --memory 4096 \
       --net0 name=eth0,bridge=vmbr0,ip=dhcp \
       --unprivileged 1

     # Start the container
     pct start 228

Structure

• modules/ - Shared configuration modules
• modules/home/ - Home Manager configuration modules
• systems/ - Machine-specific configurations
• containers/ - Container configurations
• flake.nix - Flake
• .envrc - Direnv configuration

Forking

If you want to use this repository as a starting point for your own homelab, you can do so by forking it and customizing it to your needs.

You can start by adding your own machines to the flake.nix file, and then customize the modules/ and systems/ directories to your liking.

Cheat sheet

sops

• Getting target machine public key

  ssh-keyscan tomato | ssh-to-age

Using the nix-rendezvous container for remote builds

To use the container for remote builds:

# Set up SSH config on your client machine
cat >> ~/.ssh/config << EOF
Host nix-rendezvous
  Hostname <container-ip>
  User builder
  IdentityFile ~/.ssh/id_ed25519
EOF

# Configure remote builder in nix.conf
cat >> /etc/nix/nix.conf << EOF
builders = ssh://builder@nix-rendezvous x86_64-linux
EOF

# Test a remote build
nix build --builders 'ssh://builder@nix-rendezvous' nixpkgs#hello