Lan Tian's NixOS Configuration

This repository holds the configuration files for all my NixOS systems.

Features

• Full system root-on-tmpfs, using impermanence
• Nftables instead of iptables
• Secret management with sops-nix
• QEMU user mode emulation for most architectures
• Nix Flakes with Nixpkgs patching
• Additional kernel modules from my NUR repo
  • NVIDIA driver patching
• Post-Quantum Cryptography and GOST support for OpenSSL
• Custom Helper Library (LT) that provides a wide range of functions and constants for managing the configuration.
• DNS Management using a custom Nix-to-DNSControl converter.

Host Types

My hosts are categorized into three types:

• client: A host running NixOS. Usually a desktop/laptop running a desktop environment.
• minimal: A minimal NixOS host, used for special purposes.
• server: A host running NixOS without GUI. Usually a VM running on a cloud provider.

Folder Structure

• dns: My custom Nix-to-DNSControl code that generates a DNSControl config.js file, controlling DNS records for my domains.

  • Subdirectories
    • common: Common records shared across domains.
    • core: Core component that converts a Nix attribute set into DNSControl config.js format.
    • domains: Nix definitions controlling individual (groups of) zones.

• helpers: Definitions for short cuts used by code in this repo.

• home: My Home Manager configurations.

  • Subdirectories
    • common-apps: Apps used by all nodes.
    • client-apps: Apps used by client nodes.

• hosts: Host-specific NixOS system definitions. Each subdirectory refers to a host. The list of hosts is automatically obtained in . Configs here usually control networking parameters, and host-specific tunings.