Skip to content

Packages

Standalone derivations — CLIs, Python tools, and agenix helpers.

15 recipes

  • agenix-encrypt-to-master

    Import an existing plaintext secret into an agenix-rekey tree by encrypting it to your fleet's master recipients — the counterpart to…

  • agenix-generated-recipients

    Treat agenix's recipient list (secrets/rules.nix) as a generated, committed, CI-guarded artifact — not a file you hand-edit.

  • agenix-rekey-yubikey-pin-prime

    A tiny wrapper around agenix-rekey that stops agenix rekey / agenix generate from hanging forever when your age master identity lives on…

  • Prime the YubiKey PIN Cache Before Running agenix-rekey

    Wrappers that let you drive agenix-rekey with a YubiKey master identity (age-plugin-yubikey) without the decrypt step hanging forever.

  • agenix-rules-autogen

    Stop hand-maintaining agenix's recipient list. Derive secrets/rules.nix by scanning your flake, and gate drift with a CI freshness check.

  • agenix-yubikey-pin-prime

    Wrap an agenix subcommand (generate, rekey, ...) so it runs unattended even when your master identity lives on a YubiKey and requires a PIV PIN.

  • bbolt-cli-package

    Package one CLI out of a larger Go repository with buildGoModule, instead of building every command the upstream module ships.

  • geoip-country-lists-package

    Package the ipverse/rir-ip per-country IP range lists as a pinned, reproducible Nix derivation, so firewall / fail2ban / nginx-geo rules can…

  • js-workspace-package

    Package a pnpm or npm workspace (a JS monorepo) with Nix: three worked, buildable examples of a two-package monorepo whose leaf package depends on a sibling workspace member and…

  • kokoro-onnx-nix-package

    Package kokoro-onnx — an ONNX-runtime text-to-speech engine — for Nix, when neither it nor several of its dependencies exist in…

  • mlx-lm-server

    Expose Apple's mlx-lm OpenAI-compatible server subcommand as a single, pinned Nix executable — so Apple Silicon LLM inference runs from a…

  • Package mlx-vlm on Nix Without the Torch/OpenCV Chain

    Apple's mlx-vlm runs vision-language models on Apple Silicon via MLX.

  • mlx-vlm-server

    Package Apple MLX's vision-language inference server as a standalone Nix binary, with two build-time source patches that any Apple-Silicon…

  • package-dspy

    Package the DSPy Python LLM framework (programming — not prompting — language models) for Nix, working around three things upstream does…

  • python-package-gepa

    Packaging an upstream Python tool for Nixpkgs when its pyproject.toml version string has drifted out of sync with its git tag — and keeping the closure lean by pushing heavy…