Library¶
Small reusable Nix functions and patterns.
5 recipes
-
Per-Host agenix-rekey Configuration with YubiKey Masters and Encrypted Backup
A curried agenix-rekey module fragment. You apply it once with your fleet-wide key settings, then call the result per host as ageWith…
-
A tiny helper that derives the path of a secret's public half from the filename of its encrypted private half, for use inside…
-
Build a super-minimal OCI/Docker image out of the Nix store — no distro base, no package manager, no shell, no apk add ca-certificates — and still have TLS, a non-root user, a…
-
A topology builder and fixture library for pkgs.testers.runNixOSTest. Declare subnets and hosts once; get back per-node NixOS modules that assign exactly the addresses you asked…
-
Instantiate the nixpkgs matrix — stable/unstable × CPU/CUDA/aarch64 — exactly once, up front, then let every host reuse the pre-built sets through a cheap selector.