NixOS

This repo builds two NixOS hosts from one flake and a shared baseline.

Host	Machine directory	Notes
`nix-haxorus`	`conf/machines/thinkpad/`	ThinkPad workstation with Hyprland.
`nix-baxcalibur`	`conf/machines/hp/`	HP host for shared services.

Repository Layout

Path	Purpose
`flake.nix`	Host outputs, inputs, and Home Manager wiring.
`flake.lock`	Exact upstream revisions.
`conf/shared.nix`	Shared NixOS and Home Manager modules.
`conf/machines/*/configuration.nix`	Host-specific system choices.
`conf/machines/*/hardware-configuration.nix`	Generated hardware facts.
`conf/modules/`	App config assets and focused local modules.
`conf/services/`	Reusable service modules.
`conf/secrets/owais.yaml`	SOPS-encrypted secrets.

For the concepts behind flakes and modules, see Nix Concepts.

Use the hostname as the flake target:

sudo nixos-rebuild test --flake .#$(hostname)
sudo nixos-rebuild switch --flake .#$(hostname)

Prefer test before switch when touching boot, display managers, shells, networking, secrets, or Home Manager activation.

Keep flake.lock stable unless the task is intentionally updating packages or modules. For targeted updates:

nix flake lock --update-input nixpkgs-unstable

For a broad refresh:

nix flake update

Evaluate at least one host after lock changes.

SOPS-Nix decrypts configured secrets to /run/secrets/ on NixOS hosts. See Secrets for the active secret names and local edit commands.

Shared service policy and host-specific service pages live under Services.

Use Adding a New Machine for the operational checklist.