0 Fork 0

mirror of https://github.com/ryan4yin/nix-config.git synced 2026-11-13 12:13:36 +01:00

Files

T

Ryan Yin 1324131c6d docs: correct statements that no longer match the configuration

Assisted-by: DeepSeek Harness 0.2.1-rc.2 (claude-opus-5-5)

2026-10-21 20:59:07 +08:00

1.7 KiB

Raw Blame History

Variables

Common variables and configuration used across my NixOS and nix-darwin configurations.

Current Structure

vars/
├── README.md
├── default.nix         # Main variables entry point
└── networking.nix      # Network configuration and host definitions

Components

1. `default.nix`

Contains user information, SSH keys, and password configuration:

User credentials (username, full name, email)
Initial hashed password for new installations
SSH authorized keys (main and backup sets)
Public key references for system access
Remote-builder client host keys (remoteBuilderClientKeys) that may build through aquamarine

2. `networking.nix`

Defines:

Gateway settings: Main router and proxy gateway configurations
Home LAN (lanCidr): the trusted LAN prefix the shared host firewall trusts by source
Cluster addressing: clusterULA6, the IPv6 ULA prefix for MicroVM guest addresses, and k8sVip, each k3s cluster's kube-vip API and LoadBalancer VIP block
DNS servers: IPv4 and IPv6 name servers
Host inventory: static LAN hosts and their interfaces; DHCP/mobile hosts (such as the macOS hosts) are omitted by design. homeOnly = true marks an address that exists only at home; SSH aliases and monitoring skip it
SSH configuration: Host aliases and known hosts configuration
Network topology: Physical machines, VMs, Kubernetes clusters, and SBCs

Host Categories

networking.nix maps each host to its LAN address and interface. The authoritative inventory is ../hosts/README.md; this file holds only the addresses.

Usage

These variables are imported and used throughout the configuration.

1.7 KiB Raw Blame History